Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Doodle Jump

CRITICAL RISKRemoved from Chrome Web Store

Doodle Jump

ID: dhfmblljcphajfhdfcjkidbiacaofakn

Could be malicious

Extension Info & Metadata

Status

Removed

Version

Size

0.12 MB

Rating

2.3/5

Reviews

Users

88,803

Type

Extension

Updated

Sep 19, 2019

Publisher Contextual Analysis

Author: Unblocked games 76View Profile

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

250,690

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Amazing Doodle Jump game for your browser to play online. Doodle Jump is good game and a great pass time.

Amazing Doodle Jump platforming game available for chrome browser for free. Journey up a sheet of graph paper, perpetually jumping from one platform to the next, picking up jet packs, avoiding black holes, and blasting baddies with nose balls along the way. Are you looking for a lot of fun? Doodle Jump is a popular action game which many people play. Control is simple 2 keys. Nothing will stop you from procrastination. Add to browser to play now. Doodle Jump is a fun and cute game. Your must help our alien jump as high as possible onto a range of different hand-drawn platforms. This game is an endless game, so you must simply keep jumping and try to register as high a score as you possibly can!

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium2

Low1

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1 Code review	4

Extension Version	Code Review Findings
1	4

Files with findings

3 distinct paths — top paths by unique finding count:

manifest.json2
js/background.js1
js/game-inc.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Other	high	manifest.json (line 14)	The extension requests host permissions for 30+ search engine domains (Google, Yahoo, Bing across many country TLDs) plus the `tabs` permission, yet zero lines of code reference any of these domains. A Doodle Jump gam…	1
2	Other	medium	manifest.json (line 10)	The manifest declares `unsafe-eval` in the CSP, allowing `eval()` and similar dynamic code execution. The bundled code does not use eval for any legitimate purpose. Combined with the unnecessary search engine host per…	1
3	Other	medium	js/game-inc.js (line 3)	The game is loaded from an HTTP (not HTTPS) URL. This means a network-level attacker (e.g., on public WiFi) can inject malicious JavaScript into the game iframe, bypassing Chrome's extension security model since the i…	1
4	Tracking	low	js/background.js (line 26)	The extension sends a tracking beacon to open-statistics.com on install/load, with up to 10 retries on failure. While the parameters are static (just a counter), the aggresive retry logic and use of a third-party trac…	1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.facebook.com	/sharer.php	https://www.facebook.com/sharer.php?t=&u=%SITE
twitter.com	/intent/tweet	https://twitter.com/intent/tweet?text=&url=%SITE
pinterest.com	/pin/create/link/	https://pinterest.com/pin/create/link/?url=%SITE
www.blogger.com	/blog-this.g	https://www.blogger.com/blog-this.g?n=&t=&u=%SITE
del.icio.us	/save	https://del.icio.us/save?provider=sharethis&title=%TITLE&url=%SITE&v=5
share.diasporafoundation.org	-	https://share.diasporafoundation.org/?title=%TITLE&url=%SITE
www.evernote.com	/clip.action	https://www.evernote.com/clip.action?title=%TITLE&url=%SITE
share.flipboard.com	/bookmarklet/popout	https://share.flipboard.com/bookmarklet/popout?ext=sharethis&title=%TITLE&url=%SITE&utm_campaign=widgets&utm_content=&utm_source=sharethis&v=2

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.1 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

well you can glitch the game and a virus so 5/5

Whylee·15 Mar 2021

This is unoffical. I know a lot more doodle jump games that are better first of all, there isn't even the jetpacks and the other stuff, and the red broken ones immdeatly break when you get on them I KNOW THAT THIS IS A VIRUS SO GET RID OF THIS RIGHT NOW+

Sans957·15 Feb 2021

This isn't the original Doodle Jump. The real one has quests and skins and stuff. Don't install, it's a rip off.

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Doodle Jump

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews