Security Warning: High Security Risk

Automated analysis found severe security findings in this version. Review the Security Analysis tab before trusting this extension.Extension: Blooket Hacker

HIGH RISK

Blooket Hacker

ID: kcjmkgddidcmlmmflgkenhcmfjbmhbha

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Active

Version

1.0.0

Size

1.17 MB

Rating

3.3/5

Reviews

Users

3,000

Type

Extension

Updated

Aug 30, 2025

Publisher Contextual Analysis

Author: TheChromeExtensionView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

5,012

Email Change History

1 change

Oct 1, 2025

Domain changed

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Helps you win your Blooket game!

Blooket Hacker - Ultimate Game Companion Transform your Blooket gaming experience with the most powerful companion extension! Blooket Hacker learns from your gameplay and automatically answers questions, helping you dominate every game mode. 🎯 What It Does: Smart Learning AI - Remembers correct answers from your gameplay Auto-Answer Mode - Automatically answers questions once learned Game Mode Support - Works with Fishing Frenzy, Crypto Hack, Factory, Tower Defense, and more Instant Navigation - Skips unnecessary screens for maximum efficiency Blook Preview - See all locked blooks before unlocking them 🚀 Key Features: Adaptive Intelligence - Gets smarter with every game you play Customizable Speed - Adjust response time from 10ms to 999ms Real-time Status - Monitor extension performance with live indicators Data Management - Reset learned data anytime Seamless Integration - Works automatically in the background 🎮 Perfect For: Students who want to excel in Blooket games Teachers looking to understand game mechanics Anyone who wants to improve their Blooket performance Players who enjoy strategic gameplay advantages ⚡ How It Works: Install the extension Start playing your favorite Blooket games The AI learns from your answers Next time, questions are answered automatically! Watch your scores skyrocket! 🔒 Safe & Reliable: No personal data collection Works entirely offline Respects Blooket's terms of service Regular updates and improvements Take your Blooket gaming to the next level with Blooket Hacker - the ultimate tool for dominating every game mode!

User Growth

Showing data from Aug 30, 2025 to Jul 29, 2026

Versions

-42.86%(-3,000 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 7 ratings

Average Rating

Current: 3.29 / 5.0+3.29

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium4

Low1

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0 Code review	6

Extension Version	Code Review Findings
1.0.0	6

Files with findings

2 distinct paths — top paths by unique finding count:

content_script.js5
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	high	manifest.json (line 8)	The extension declares host_permissions and a content_script match pattern of <all_urls>, injecting content_script.js into every page the user visits (banking, email, healthcare, intranets) despite being marketed stri…	1.0.0
2	Credential Theft	medium	content_script.js (line 237)	Reads DOM elements named `username` and `password`, stores the (user, password-options) pairs in an in-memory `passwords` map, and auto-clicks the matching button. In the Blooket context this targets the in-game passw…	1.0.0
3	Other	medium	content_script.js (line 213)	Programmatically synthesizes click events on DOM elements whose class names contain substrings like `_choice_` or `pageButton`. Because the content script is active on every URL, the auto-clicker can fire on non-Blook…	1.0.0
4	Unauthorized Data Collection	medium	content_script.js (line 12)	Because the content script loads on <all_urls>, these generic class-substring selectors (e.g. anything containing `questionText_`, `_button_`, `_terminal_`) execute on every page. The `username`/`password` selectors s…	1.0.0
5	Unauthorized Data Collection	medium	content_script.js (line 374)	Scraped DOM content (questions/answers harvested from any page where the selectors match) is serialized and forwarded to the extension popup, which then writes it into chrome.storage.sync. There is no domain check bef…	1.0.0
6	Other	low	content_script.js (line 438)	The message listener runs JSON.parse on `request.data` from any extension-internal message and feeds it into addData()/the in-memory state. While Chrome's runtime messaging is scoped to this extension, the lack of any…	1.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


buymeacoffee.com	/llamadev	https://buymeacoffee.com/llamadev
fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800&display=swap
fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,400;0,700;1,300&family=Titan+One&display=swap
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/exif/1.0/	http://ns.adobe.com/exif/1.0/
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap
fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Roboto+Mono&family=Roboto+Slab&display=swap

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.6 out of 5 · 5 most recent reviews

Text reviews

Positive

Negative

This is black magic. A literal game changer. Keep in mind that you must answer all the questions once first before it learns from your answers. Highly recommend especially if your teacher grades Blookets.

Isaac Vaziri·21 May 2026

Doesn't work

Benny·4 Nov 2025

black monkrry

Isaac Sosnak·23 Oct 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Warning: High Security Risk

Blooket Hacker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Email Change History

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating