Extension Auditor
Extension Auditor
Sign Up
FACEIT FORECAST

FACEIT FORECAST

ID: mpkkcddegpblmobincjkbpgfcbejjbcp

Supported Languages

🇺🇸English
🇫🇷French
🇩🇪German
🇵🇱Polish
🇷🇺Russian
🇺🇦Ukrainian

Extension Info & Metadata

Status
Active
Version
1.8.2
Size
0.10 MB
Rating
4.8/5
Reviews
68
Users
100,000
Type
Extension
Updated
Jun 8, 2026
Category
Just for fun
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
fforecast.netView Profile
Privacy
Privacy Policy
Help
Help Center
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Total Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Total Users
100,000
Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

A convenient extension for detailed statistics on Faceit.

This project is a browser extension that collects and displays detailed statistics for Faceit matches and players. Key features include: - Extend match statistics. - Display win rates for teams in a match. - Calculate player stats and display them on user cards. - Introduced new Faceit Skill Levels with a more detailed breakdown by elo. - Display specific statistics in match history (Score, HLTV 2.1 rating, K/D, K/R, ADR) - Allows you to see the tab information of the match, without having to follow the link - Allows sending a specific message on a particular map when it's selected or picked This extension stays free thanks to optional partner integrations. A small, non-intrusive banner may be shown and can be turned off in the settings.

Item
Type
Severity
Description
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: • 10% increase: Early script execution enables pre-emptive content manipulation
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

By severity

Critical0
High1
Medium4
Low1

Versions scanned

Showing 1 of 44 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.7.136

Files with findings

3 distinct paths — top paths by unique finding count:

  • forecast.js4
  • src/background/worker.js1
  • src/visual/popup.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Network Interception
high
forecast.js (line 3366)The content script reads `useProxy`/`proxyBaseUrl` from a remotely-fetched `endpoints.json` config (loaded from cdn.fforecast.net, cached in storage) and, when enabled, reroutes every `open.faceit.com` / `faceit.com/a…
1.7.13
2Network Interception
medium
src/background/worker.js (line 1)The service worker polls `/v2/extension/resolve` every 5 minutes and, if the primary endpoint fails, silently switches the active backend to a separate `fforecast.dev` infrastructure. All subsequent auth, device-regis…
1.7.13
3Privilege Escalation
medium
forecast.js (line 2032)The `poscatcher` module automatically writes user-configured text into the FACEIT matchroom chat textarea using the React-bypassing `HTMLTextAreaElement.prototype value` setter and then synthetically dispatches Enter …
1.7.13
4Remote Code Loading
medium
forecast.js (line 264)The extension fetches a Bearer access-token either from its backend or, as a fallback, from a raw GitHub URL (`raw.githubusercontent.com/Faceit-Forecast/Forecast/.../api-key`) and attaches it to outgoing FACEIT API re…
1.7.13
5Unauthorized Data Collection
medium
forecast.js (line 3244)Fetches HTML + targetUrl from the extension's `/v2/integrations/banner` endpoint and injects that server-controlled HTML into `www.faceit.com` via `innerHTML` as a clickable banner. Although `<script>` tags and `on*` …
1.7.13
6Remote Code Loading
low
src/visual/popup.js (line 128)The popup UI fetches patch-notes markdown from a hard-coded raw GitHub URL and extracts `<img src>` values from it, inserting images into the popup DOM. Because the repo owner can modify this file at any time, the pop…
1.7.13
URLs
0
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No URLs found

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
1.8.2
Latest
0.10 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.8.0
0.10 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.7.17
0.09 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.7.16
0.09 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.7.15
0.09 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.7.14
0.09 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.7.13
0.09 MB
Malicious
6
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.7.12
0.08 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.7.11
0.08 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
1.7.10
0.08 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
Showing 1 to 10 of 50 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In