Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Doodle Jump Game

CRITICAL RISKRemoved from Chrome Web Store

Doodle Jump Game

ID: ioihmdlaodpflcjnilejomfecjnmgcko

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.1.0.21

Size

0.22 MB

Rating

4.2/5

Reviews

Users

61,776

Type

Extension

Updated

Jun 18, 2020

Publisher Contextual Analysis

Author: FlappyGamesProView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

61,776

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

The green alien needs your help to jump higher! The famous game is available in your browser.

The classic Doodle Jump game as Chrome extension! The extension allows you to play the Doodle Jump Game directly from your Chrome browser! The goal of the game is to help the character to get higher and score as many points as possible. The hero in the Doodle Jump Game is controlled by using the arrows on the keyboard. No need to visit any website to play. Just click on the game icon at the top of your browser in order to open the game window!

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High3

Medium2

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.0.21 Code review	6

Extension Version	Code Review Findings
1.1.0.21	6

Files with findings

4 distinct paths — top paths by unique finding count:

files/newtabpromo_bg.js2
socialmodule/social.js2
bg.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	socialmodule/social.js (line 48)	On every popup open the extension fetches a JSON configuration object from `social.apihub.info` keyed by extension ID. The returned payload controls `show_probabilities`, `see_also` (extension install targets with cus…	1.1.0.21
2	Other	high	manifest.json (line 17)	The bundled manifest includes `unsafe-eval` in its CSP, which is absent from the published manifest summary. This discrepancy means the installed version has weaker script isolation than the store listing suggests, an…	1.1.0.21
3	Tracking	high	files/newtabpromo_bg.js (line 26)	On every background page load the extension silently POSTs to a third-party analytics endpoint (`p2.stat-metric.com`) without user consent or disclosure. The retry logic (10 attempts) ensures the beacon is delivered e…	1.1.0.21
4	Tracking	high	files/newtabpromo_bg.js (line 3)	On first install the extension immediately opens a tab to `promo-newtab.club` (an HTTP promotional domain) without any user interaction or disclosure. The URL encodes the UI language and extension name, providing the …	1.1.0.21
5	Code Injection	medium	bg.js (line 1)	The background script uses `chrome.tabs.executeScript` with a dynamically-constructed code string to inject an iframe into every visited page. While the iframe src is locked to the extension's own `app.html`, this pat…	1.1.0.21
6	Unauthorized Data Collection	medium	socialmodule/social.js (line 658)	The social module iterates the server-supplied `see_also` list and calls `chrome.management.get()` for each extension ID to determine which are already installed. This builds a profile of the user's installed extensio…	1.1.0.21

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/johnkpaul/jquery-ajax-retry	https://github.com/johnkpaul/jquery-ajax-retry
www.w3.org	/Protocols/rfc2616/rfc2616-sec14.html	http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.37
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
ssl.google-analytics.com;	-	https://ssl.google-analytics.com;
fonts.googleapis.com	/css	https://fonts.googleapis.com/css?family=Roboto
sizzlejs.com	-	http://sizzlejs.com/
social.apihub.info	/v1.php%60;	https://social.apihub.info/v1.php`;
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.facebook.com	/share.php	http://www.facebook.com/share.php?u=${encodeURIComponent(
chrome.google.com	/webstore/detail/	https://chrome.google.com/webstore/detail/

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.1.0.21	IPv4	-

4.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

This games is challening and fun. I love the little icon. The icon makes it like a little video game that brings you right back to when yoou were a kid. I also have a idea maybe the you could choose your own icon and earn coins when you get to ten then to 20 and so on you get one coin and then you save up the coins and get a new icon and you can change it whenever you want and I think there should be a way to pause the game and to go up and down not just left and right but if you don't want to choose if you go up and down you can put it off of that setting, I just think that it would be more challening if you had to controll if you were going up or down. Hope that wasn't to hurtful llike hurtful that I want to change your game or whoever made it . I think Google made it but whatever. Alright bye. Have a nice day. Oh, one more thing if you are reading this reweiw to see if you want to play this game I will tell you it is so much fun and I play it all the time . Now bye.

Omar Khorbatly II·7 Apr 2021

Very addicting and fun to play. Not laggy at all and overall just fun to mess around with. I recommend to anyone out there who is bored to just turn this little extension on.

Zachary B·7 Apr 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Doodle Jump Game

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews