Extension Auditor
Extension Auditor
Sign Up

Doodle Jump

ID: fgnbplaclhmficpjagkncijoeclgflab

Could be malicious

Supported Languages

🇧🇩Bengali
🇧🇷Brazilian Portuguese
🇬🇧British English
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇵🇭Filipino
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇳Gujarati
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇲🇽Latin American Spanish
🇱🇻Latvian
🇱🇹Lithuanian
🇲🇾Malay
🇮🇳Malayalam
🇮🇳Marathi
🇳🇴Norwegian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇸🇪Swedish
🇮🇳Tamil
🇮🇳Telugu
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Removed
Version
21.9.21.7
Size
0.15 MB
Rating
4.1/5
Reviews
15
Users
100,000
Type
Extension
Updated
Jan 5, 2022
Category
14_fun
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
karavchenkovikaView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
5
Active
0
Obsolete
5
Listed
5
Unlisted
0
Total Users
130,000

The green alien needs your help to jump higher! The famous Doodle Jump game is available in your browser.

Doodle Jump Simple game in popup you're browser

Item
Type
Severity
Description
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

By severity

Critical2
High0
Medium1
Low0

Versions scanned

Showing 1 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
21.9.21.53

Files with findings

2 distinct paths — top paths by unique finding count:

  • install.js2
  • files/typromo_bg.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Obfuscation
critical
install.js (line 9)This content script injects a dynamically constructed script tag into every webpage (matched via <all_urls> at document_start). The injected code uses string-reversal obfuscation (r=(a)=>a.split('').reverse().join('')…
21.9.21.5
2Remote Code Loading
critical
install.js (line 9)The decoded GTM loader fetches //googletagmanager.com/gtm.js?id=GTM-P2VHJ9P and appends it to every page's DOM. An attacker-controlled GTM container allows deploying keyloggers, credential harvesters, ad injection, or…
21.9.21.5
3Tracking
medium
files/typromo_bg.js (line 84)Although this code is commented out in the bundled version, it reveals the extension's historical adware behavior: on install it opened thank-you-page.com and injected promotional overlay HTML into the resulting tab v…
21.9.21.5
URLs
9
IPv4
1
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
*/*https://*/*
*/*http://*/*
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
www.w3.org/1999/02/22-rdf-syntax-nshttp://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com/xap/1.0/http://ns.adobe.com/xap/1.0/
ns.adobe.com/xap/1.0/mm/http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com/xap/1.0/sType/ResourceRefhttp://ns.adobe.com/xap/1.0/sType/ResourceRef#
thank-you-page.com-http://thank-you-page.com/?lang=
thank-you-page.com-http://thank-you-page.com/?source_type=uninstall&lang=

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
21.9.21.7
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
21.9.21.6
Latest
0.15 MB
Malicious
—N/A
21.9.21.5
0.15 MB
Malicious
3N/A
21.9.21.2
0.15 MB
Malicious
—N/A
20.9.21.1
0.15 MB
Malicious
—N/A
7.3.2021.1
0.15 MB
Malicious
—N/A
21.9.21.7
0.15 MB
Malicious
—N/A
Showing 1 to 6 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In