Chrome Web Store
106Versions
1Code reviewed

No malware found

In code review (v2.8.9)

Our reviewer read version 2.8.9 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Boxel 3D, used by 400,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 medium), led by other. It comes from a trusted publisher and was last updated in July 2026.

Key findings

  • medium· other —The bundled manifest includes both 'storage' and 'unlimitedStorage' permissions, but the published Chrome Web Store listing shows only 'storage'. This discrepancy could indicate an unreported change or a listing error. While 'unlimitedStorage' is not inherently malicious, the mismatch may mislead users about the extension's capabilities.

The extension is a well-known 3D speedrunning game with a large user base, trusted publisher, and no evidence of malicious behaviour. The ML model's low score (0.00) and the third-party risk assessment ( impact, likelihood) corroborate a benign classification. The only finding is a manifest permission discrepancy (bundled manifest includes 'unlimitedStorage', published listing only shows 'storage'), which is likely a listing error and not indicative of hidden capabilities. All network activity (Discord links, Google Play, file) is user-initiated and disclosed. The 'wasm-unsafe-eval' CSP header is required for the game's WebAssembly physics engine. No data collection or exfiltration was found.

Boxel 3D

Boxel 3D Chrome extension security report

ID: mjjgmlmpeaikcaajghilhnioimmaibon

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2.9.3
Size
6.34 MB
Rating
4.6/5
Reviews
1,900
Users
400,000
Type
Extension
Updated
Jul 22, 2026
Category
Games
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
4extensions
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
https://dopplercreative.com/
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
4
Active
4
Obsolete
0
Listed
4
Unlisted
0
Users
1,600,205

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Install growth

Item
Type
Severity
Description
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 25% increase: Unsafe code evaluation capabilities increase attack surface
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Boxel 3D is a speedrunning game packed with challenging levels, custom skins, online multiplayer, and a creative level editor.

Read the publisher’s full description

Features: - Over 50 levels - Online multiplayer - Custom skins - Level editor - Mods No internet? No problem. Play offline to beat your high scores. Changelog: v2.8.0 - Fixed text duplication bug v2.7.9 - Added custom events for modding v2.7.8 - Added input buffer verification badge to thumbnail v2.7.7 - Added level editor color shortcut: "Shift" + "Click" to copy color from selected cube - Fixed level pack 404 errors v2.7.6 - Added new community level v2.7.5 - Added Hindi translations (credit: Ash (ADL)) v2.7.4 - Added theme option to level packs - Update level pack default theme v2.7.3 - Added Level Packs (Settings > Data > Level Packs) v2.7.2 - Prevent initial jump when closing popup v2.7.1 - Added coordinates to Level Editor - Fixed input while popup is closing v2.7.0 - Added blank theme to Level Editor v2.6.9 - Fixed color bug - Fixed friction menu v2.6.8 - Added cube color option - Added "Teleport" cube - Added jump bug (removed in 2.6.6) - Fixed UI shortcuts v2.6.7 - Fixed Level Editor shortcuts v2.6.6 - Added "Power" cube - Added "Repeat Duplication" feature to level editor. Hold Shift while dragging an object to duplicate, then press "D" to repeat duplication. - Fixed input buffer - Fixed popup shortcuts v2.6.5 - Added Checkpoint button - Fixed multiplayer bugs - Improved performance on Mac (credit: Onionfist) v2.6.4 -Updated translations -Fixed Old UI controls v2.6.3 - Added French translation (credit: R - G - C™) - Updated translations v2.6.2 - Added Android support - Added controller settings - Updated gameplay UI - Fixed Level Editor camera - Fixed file saving v2.6.1 - Added UI scale option - Updated controller buttons v2.6.0 - Fixed Discord link v2.5.9 - Updated Workshop - Fixed author names v2.5.8 - Added option to enable or disable Steam Workshop items - Fixed Dungeon Escape high score bug - Fixed shortcuts v2.5.7 - Added 5 new community levels - Update volume for sound effects v2.5.6 - Fixed multiplayer bug v2.5.5 - Added thumbnails to backup files - Improved performance v2.5.4 - Added Workshop links v2.5.3 - Fixed Steam Errors v2.5.2 - Added screenshots to completed levels - Updated Workshop UI - Updated Levels UI - Updated Mods UI - Fix Level Editor bugs v2.5.1 - Added theme selector to Level Editor - Added skins to Workshop (Steam only) - Added mods to Workshop (Steam only) - Updated Steam Workshop UI v2.5.0 - Added Steam Workshop (Steam only) - Added Workshop UI for publishing levels to Steam - Fixed multiplayer bugs - Fixed Level Editor axis rotation bug v2.4.2 - Added player coordinates (Settings > Graphics > Show FPS > then click FPS while playing) - Updated max time from 16 minutes to 11 days v2.4.1 - Added Steam Overlay (Steam only) - Added window size/position preferences (Steam only) v2.4.0 - Updated multiplayer menu options - Updated level editor rotation behavior (press "R" twice to unlock x/y axis) v2.3.9 - Added optional themes for custom levels v2.3.8 - Added speedrun verification badge (appears when input buffer is 0ms and the debug mode is disabled) - Updated translations v2.3.7 - Added input buffer option - Updated level selector - Updated Korean translations - Fixed crash caused by finishing the last level v2.3.6 - Added new level selector menu - Added Korean translation (credit: SangSang2) - Fixed chat font v2.3.5 - Added Persian/Farsi translation (credit: Zeta) - Added loading animation to home screen v2.3.4 - Added Spanish translation (credit: outerbound) v2.3.3 - Added Boxel 1 music - Added Boxel Golf music v2.3.2 - Added music selector (currently 3 songs) v2.3.1 - Added multiplayer shortcut to home page v2.3.0 - Added new music and sound effects v2.2.9 - Added "R" shortcut after finishing a level - Updated community level "Wallclimb Ascension" - Fixed missing level numbers for Old UI v2.2.8 - Renamed "Alpha" levels to "Blue City" - Added 5 new community levels v2.2.7 - Added new home page - Updated community levels v2.2.6 - Added new Alpha Testing level - Added more snap options to level editor - Updated resize cube to resize any cube v2.2.5 - Added 5 new community levels - Fixed "The Arcadium" community level - Fixed high score UI bug v2.2.4 - Added global Matter.js variables for modding - Fixed level export bug v2.2.3 - Added fullscreen button to home screen v2.2.2 - Added level links to multiplayer chat - Added basic HTML tags to multiplayer chat (ex: h1, strong etc.) - Updated background material - Fixed new record visual bug v2.2.1 - Improved network performance v2.2.0 - Added multiplayer v2.1.9.1 - Fixed invisible rope - Fixed muted audio quietly playing v2.1.9 - Updated community level "The Box Escape" v2.1.8 - Added 3 new community levels - Updated rope collisions v2.1.7 - Added shortcut "C" to restart from checkpoint v2.1.6 - Added buttons for controls - Added debug mode v2.1.5 - Added custom mods - Added controls cube (credit: Charlieee1) - Added new alpha level - Fixed timer showing incorrect time v2.1.4 - Added the original background artwork v2.1.3 - Added a new community level (Kllixto) - Fixed a level picker bug v2.1.2 - Added a new level (Ping Pong) - Fixed the Level Editor tip bug v2.1.1 - Added community level credit - Added community Discord link - Updated level backgrounds v2.1.0 - Added 7 new environments for each level pack - Fixed community level scores v2.0.0 - Added new UI - Added option to switch to old UI v1.3.1 - Fix escape shortcut v1.3.0 - Added FPS option - Updated skins page - Updated audio system - Updated new UI framework (Vue.js) - Removed old UI framework (jQuery) v1.2.1 - Added a new community level - Added a new community Discord link - Update render logic v1.2.0.4 - Added camera rotation to level editor (right-click) - Added shortcut to reset selected object z-axis ("0" key) v1.2.0.3 - Added "z-axis" option to level editor v1.2.0.2 - Reset cube now resets the player direction v1.2.0.1 - Updated level editor background v1.2.0 - Added 3D background - Updated 3D Engine from r116 to r156 (3 years old) - Updated level editor - Updated rope design (white) - Updated all game files - Removed FPS limit v1.1.9.2 - Added the option to upload custom skins v1.1.9.1 - Added new community levels v1.1.9.0 - Added tab buttons for campaign and community levels v1.1.8.0 - Added camera rotation when the gravity cube is triggered - Added camera motion option (default on) v1.1.7.2 - Added new community levels v1.1.7.0 - Added new "Reset Cube", this resets your scale, gravity direction, and removes the rope mode when touched - Added 3 new community levels - Updated minimum scale from 16 to 8 (small cubes) v1.1.6.1 - Added 5 new community levels v1.1.6 - Added level 36 - Added free Boxel Golf skin - Fixed level name editor v1.1.5.2 - Upgraded physics engine (matter.js) from 0.14.2 to v0.18.0. This can improve performance up to 40% v1.1.5.1 - Fixed level 27 slip glitch v1.1.5.0 - Added level 35 - Added shortcuts to Level Maker (Undo, Redo, Save, Rotate, Scale, Delete) v1.1.4.4 - Fixed menu height issue - Update manifest version from 2 to 3 v1.1.4.2 - January 29, 2021 - Fixed rope attaching to invisible blocks v1.1.4.1 - January 25, 2021 - Added 2 new test levels v1.1.4 - January 12, 2021 - Fixed ESC key exploit when finishing level - Updated background v1.1.3 - January 11, 2021 - Fixed jump bug when pressing 'r' - Fixed duplicate ropes - Updated level 25 finish line - Improved performance - Simplified background artwork v1.1.0 - January 6, 2021 - Added grappling hook - Added alpha testing levels v1.0.0 - December 5, 2020 - Remove licenses, everything is free - Update logo v0.3.0 - August 19, 2020 - Add tester license for everyone - Add Google integration (backup, restore, etc.) v0.2.2 - August 17, 2020 - All skins are now free v0.2.1 - August 13, 2020 - Added custom skin option to shop v0.2.0 - August 3, 2020 - Added gravity cube - Added 5 new levels v0.1.9 - July 28, 2020 - Added gravity cube (experimental) v0.1.8 - July 26, 2020 - Added option to backup data - Added option to restore data v0.1.7 - July 22, 2020 - Add resize block - Remove shrink block - Remove grow block v0.1.6 - July 20, 2020 - Update Tip cube behavior - now disappears when selected - Update level 1, 5, 12 & 14 - Add final level dialog v0.1.5 - July 17, 2020 - Added theme music - Update skin render behavior v0.1.1 – July 13, 2020 - Added keyboard shortcuts (ex: R to restart, ESC to pause/return) v0.1.0 – July 11, 2020 - Added “MySkins” shop - Added 3 skins v0.0.7 – July 7, 2020 - Added level sharing (file only) - Added level downloading (file only) - Added level 11 - Fixed level 6 wall glitch - Fixed old score value from preventing new records v0.0.6 – July 6, 2020 - Added speedometer - Updated time format from 12:34 to 12.345 v0.0.5 – July 6, 2020 - Added background artwork v0.0.4 – July 4, 2020 - Added lighting for player v0.0.3 – July 3, 2020 - Added score saving system v0.0.2 – July 2, 2020 - Added timer to campaign v0.0.1 – July 2, 2020 - 10 levels - 8 block types - 3D Level Editor

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
92
IPv4
20

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
2.9.3
Latest
6.34 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.9.2
6.34 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
2.9.1
6.34 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
2.9.0
6.34 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
2.8.9
6.96 MBNo malware found0
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
2.8.8
6.96 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
2.8.7
6.96 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
2.8.6
6.96 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
2.8.5
6.96 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.8.4
6.96 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
Showing 1 to 10 of 110 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from https://dopplercreative.com/

Popular in Games