Chrome Web Store

5Versions

0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

What our analysis found

Draft Hacker by League Winner Sports, used by 1,000 people, is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It was last updated in October 2026.

Draft Hacker by League Winner Sports Chrome extension security report

ID: ecilbffkhihhoclpoaeedkknalkhmlog

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

1.9.13

Size

0.14 MB

Rating

5.0/5

Reviews

Users

1,000

Type

Extension

Updated

Oct 6, 2026

Publisher Contextual Analysis

Author: mdwomersley
Privacy: Privacy Policy
MX records exist: No
Domain exists: No
Is disposable: No
Is role-based: No
Mailbox exists: No
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

1,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Install growth

User Growth

Showing data from Aug 24, 2026 to Oct 25, 2026

Versions

No change in user count

Compared to 2 months ago

5 versions released in this period

Rating Count

Total: 1 ratings

Average Rating

Current: 5.00 / 5.0+5.00

See plans

React Flow

Internal permhash`0be5b44037…`
No malicious matches

No other extension carries this fingerprint.

Permhash (Mandiant)`02bf532f6a…`
Too common to be evidence

1,596 other extensions carry this fingerprint, 93 of them known malicious. A permission set this common is not evidence on its own; the most installed members are listed for reference.

Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
+1,589 more

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk: • 19% increase: Access to sensitive domains increases potential impact • 10% increase: Early script execution enables pre-emptive content manipulation
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab	Permission	Medium	This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
https://fantasy.espn.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://basketball.fantasysports.yahoo.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://sleeper.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://www.sleeper.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://api.sleeper.app/*	Host	Medium	Host permission — access limited to this URL pattern.
https://leaguewinnerapp.netlify.app/*	Host	Medium	Host permission — access limited to this URL pattern.
https://leaguewinnersports.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://auth.leaguewinnersports.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://www.fantrax.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://fantrax.com/*	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: https://basketball.fantasysports.yahoo.com/*
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.

Sensitive Domain Access

This extension has access to the following sensitive domains:

https://basketball.fantasysports.yahoo.com/*

About this extension

Hack your fantasy basketball draft across ESPN, Yahoo, Sleeper and Fantrax using our private Chrome extension.

Read the publisher’s full description

Draft Hacker is League Winner's live draft tool for fantasy basketball. This extension connects your live draft to our advanced algorithm, you will receive tailored suggestions about which player to draft in real-time. How it works: 1. Add the extension to Chrome. 2. Click the League Winner icon and pin it, log in with your League Winner Pro account and press Activate. 3. Open your draft room on ESPN, Sleeper, Yahoo or Fantrax in one tab and Draft Hacker in another. The tool will track your live draft and which players are left under your league's own scoring and make two player suggestions on who to take with your pick (one safe pick and one value pick). Every pick you make in your live draft syncs automatically. This extension reads only your live draft tab and syncs any picks to your own League Winner tab. It does not read the rest of your browsing, it does not collect analytics, and it does not sell or share anything. Logging in talks only to League Winner's own authentication service. This extension is a League Winner Pro tool, so activating the extension requires a Pro membership. League Winner is a leading web-based suite of fantasy basketball tools. You can contact the team with any feedback or further questions at hello@leaguewinnernba.com

User reviews

5.0 out of 5 · 1 most recent review

Text reviews

Positive

Negative

Helped my kill my draft!!!

Ben Kolasin·29 Aug 2026

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No network indicators were extracted from this version.

Version	Size	Verdict	Findings	Permhash
1.9.13 Latest	0.14 MB	Not scanned	—	02bf532f6a93e3885c5de40d941194eba86e41c7883d2392540613d99137d96b
1.9.12	0.11 MB	Not scanned	—	02bf532f6a93e3885c5de40d941194eba86e41c7883d2392540613d99137d96b
1.9.11	0.09 MB	Not scanned	—	efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
1.9.10	0.09 MB	Not scanned	—	02bf532f6a93e3885c5de40d941194eba86e41c7883d2392540613d99137d96b
1.4.0	0.05 MB	Not scanned	—	efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9

Showing 1 to 5 of 10 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Entertainment

Microsoft Edge Flash Player29,712,769 users
Netflix Party is now Teleparty10,000,000 users
Netflix Party is now Teleparty2,363,605 users
Microsoft Multimedia Redirection1,697,615 users
AHA Music - Song Finder for Browser1,000,000 users

Store rankings

Where this extension appears in store category, collection and keyword rankings.

Not reviewed

What our analysis found