Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Cradle

CRITICAL RISKRemoved from Chrome Web Store

Cradle

ID: ppgbdgcacdkfilmdgjlcmigpbnamdkip

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

0.1.5

Size

17.94 MB

Rating

5.0/5

Reviews

2,517

Users

4,884

Type

Extension

Updated

Feb 18, 2023

Publisher Contextual Analysis

Trusted

Author: http://playcradle.comView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

4,887

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

A Crypto Wallet for Gamers

A Crypto Wallet for Gamers. Live on Sui! A secure and easy-to-use crypto wallet that supports Sui, Ethereum, Binance Smart Chain, & more. Equipped with everything you need to explore the Web3 world! Cradle was built specifically for gamers- the wallet enables you to find, play, and interact with the best games and the best blockchain applications (dApps) on Web3. Works on any site that supports Metamask. You own your keys. You can easily create a new wallet with email + password. Get started today! ❤️ Sui Support ❤️ - We are one of the first wallets to support Sui! - Built to play games on Sui like rage.playcradle.com - We’re building useful dapps on Sui for you to explore the chain, stay tuned! 🎨 Customization 🎨 - For the first time ever, you’re able to customize the way your wallet looks! - Set a custom color theme for your wallet and make it feel like truly your own wallet - Choose between any two colors or hit randomize for a surprise gradient theme! 🏆 Trophies 🏆 - You’re now able to earn trophies for your favorite Web3 games! - By playing blockchain games with the Cradle wallet you can now earn trophies and achievements that track your progress in the game 🙎‍♂️ Public Profiles 🙎‍♂️ - The Cradle wallet now offers public profiles you can view and share with your friends! - Show off your progress and trophies on your favorite blockchain games **Cradle is here to buidl the best Web3 gaming experience, you in?**

User Growth

Showing data from Oct 27, 2022 to May 10, 2023

Versions

+180.37%(+3,142 users)

Compared to 3 months ago

10 versions released in this period

Rating Count

Total: 2,517 ratings

Average Rating

Current: 4.95 / 5.0+4.95

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High3

Medium4

Low0

Versions scanned

Showing 1 of 10 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.0.6 Code review	8

Extension Version	Code Review Findings
0.0.6	8

Files with findings

5 distinct paths — top paths by unique finding count:

background.aa95d78a.js4
inject.6df03751.js1
login.3079e42e.js1
providerMiddleware.ca5beafd.js1
requestRules.23c03567.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	critical	background.aa95d78a.js (line 1014)	The extension stores the user's wallet password in plaintext in chrome.storage.local (key 'password') and automatically appends it to outbound API calls for any endpoint in the sensitive list 'p', which includes 'wall…	0.0.6
2	Code Injection	high	inject.6df03751.js (line 64)	This content script runs at document_start on every URL (all_frames: true) and programmatically creates and appends a <script> element pointing to 'intialize.8ebd0cf1.js' (a web_accessible_resource) into every webpage…	0.0.6
3	Data Exfiltration	high	login.3079e42e.js (line 1)	This content script runs on 'https://playcradle.com/authtoken*' and extracts a Stytch magic link authentication token directly from the URL query string, then transmits it to an HTTP endpoint at localhost:8080 rather …	0.0.6
4	Tracking	high	background.aa95d78a.js (line 1019)	Every user action (wallet connect, transaction, chain switch, sign message) is transmitted to Amplitude analytics with the user's stored email address as user_id and their IP address as a user property, using a hardco…	0.0.6
5	Unauthorized Data Collection	medium	background.aa95d78a.js (line 1290)	A dedicated message handler ('setIp') accepts an IP address from content scripts running on any page and stores it persistently in chrome.storage.local. This IP is then used as a tracked user property in all Amplitude…	0.0.6
6	Unauthorized Data Collection	medium	requestRules.23c03567.json (line 1)	A declarativeNetRequest rule silently injects a 'ref=playcradle.com' affiliate referral parameter into every top-level navigation to any pixels.xyz domain. This monetizes user visits to Pixels (a blockchain game) by h…	0.0.6
7	Unauthorized Data Collection	medium	background.aa95d78a.js (line 1694)	Immediately upon installation, the extension reads all cookies from the playcradle.com domain and persists values into extension storage. While the code filters for 'theme' cookie names, reading playcradle.com cookies…	0.0.6
8	Unauthorized Data Collection	medium	providerMiddleware.ca5beafd.js (line 50)	This content script runs at document_start on all URLs (all_frames: true) and acts as a bridge, forwarding any window.postMessage events that match a list of wallet operations (including 'wallet/private-key', 'signMes…	0.0.6

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

167

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


luzi-type.ch	/info.htmlCopyright	http://luzi-type.ch/info.htmlCopyright
luzi-type.ch	/End	http://luzi-type.ch/End
feross.org	/opensource	https://feross.org/opensource
feross.org	-	https://feross.org
github.com	/indutny/elliptic/issues	https://github.com/indutny/elliptic/issues
github.com	/indutny/elliptic	https://github.com/indutny/elliptic
github.com	/crypto-browserify/crypto-browserify	https://github.com/crypto-browserify/crypto-browserify
github.com	/facebook/regenerator/blob/main/LICENSE	https://github.com/facebook/regenerator/blob/main/LICENSE
fb.me	/use-check-prop-types	http://fb.me/use-check-prop-types
reactjs.org	/docs/error-decoder.html	https://reactjs.org/docs/error-decoder.html?invariant=

Showing 1 to 10 of 170 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.101.3.4	IPv4	-
1.3.132.0	IPv4	-
127.0.0.1	IPv4	-
51.141.78.53	IPv4	-
13.93.54.137	IPv4	-
94.237.54.114	IPv4	-
18.218.250.66	IPv4	-
3.11.147.67	IPv4	-
51.15.116.226	IPv4	-
51.15.119.157	IPv4	-
116.203.116.241	IPv4	-
3.217.96.11	IPv4	-
108.61.170.124	IPv4	-
157.230.31.163	IPv4	-
18.138.108.67	IPv4	-
3.209.45.79	IPv4	-
34.255.23.113	IPv4	-
35.158.244.151	IPv4	-
52.187.207.27	IPv4	-
191.234.162.198	IPv4	-
52.231.165.108	IPv4	-
104.42.217.25	IPv4	-
52.169.42.101	IPv4	-
52.3.158.184	IPv4	-
159.89.28.211	IPv4	-
52.176.7.10	IPv4	-
52.176.100.77	IPv4	-
52.232.243.152	IPv4	-
192.81.208.223	IPv4	-
2.2.3.6	IPv4	-
2.3.4.5	IPv4	-
2.1.3.2	IPv4	-
4.1.1.3	IPv4	-
3.1.5.3	IPv4	-
4.3.7.8	IPv4	-
4.3.7.2	IPv4	-
11.3.6.8	IPv4	-
4.2.8.1	IPv4	-
4.2.8.2	IPv4	-
3.3.8.2	IPv4	-
1.1.3.4	IPv4	-
1.1.8.9	IPv4	-
2.4.3.8	IPv4	-
2.5.3.9	IPv4	-
1.5.1.7	IPv4	-
4.1.8.1	IPv4	-
25.25.25.66	IPv4	-
18.168.182.86	IPv4	-
52.14.151.177	IPv4	-

Showing 1 to 49 of 50 rows

Rows per page:

4.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Excellent project! Great team work!

San4ez Quark·10 Apr 2023

Nice project! Team good luck!

Jakob Ivarsson·10 Apr 2023

Very nice project! Great Team!

Resident Resident·10 Apr 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Cradle

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 10 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating