Flappy Dunk

ID: opompdjogdoepddnbhnghbfpggbkldjo

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Removed
Version
1.0.2
Size
1.36 MB
Rating
1.0/5
Reviews
1
Users
6,000
Type
Extension
Updated
Sep 20, 2023
Category
Lifestyle Games
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes

Publisher Contextual Analysis

Trusted
Author
Monkey MartView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
3
Active
0
Obsolete
3
Listed
3
Unlisted
0
Total Users
14,000

Flappy Dunk basketball game to play in browser

Flappy Dunk is an absolute sensation, this game is like no other. It's a fast-paced, action-packed adventure where you'll be flapping and dunking your way to greatness. Picture this: you're a bird, and your mission is to fly through an endless array of obstacles while trying to sink that ball into the basket. The concept may sound simple, but trust me, it's pure genius! The controls are incredibly intuitive. All you have to do is click anywhere on the screen to flap your wings and release to execute a magnificent dunk. As you progress through the game, you'll encounter challenging pipes that will test your skills to the limit. It's a thrilling race against time to beat your own high score and prove yourself as the ultimate Flappy Dunk champion. What makes this game so addictive is its perfect blend of simplicity and excitement. With just a press of the space bar to flap and release to dunk, you'll be hooked from the very first try. The rush you feel when you successfully navigate through the obstacles and score those baskets is unparalleled. Not only is Flappy Dunk incredibly fun, but it also helps you develop your hand-eye coordination and reflexes. It's like a training ground for future basketball stars! You'll need lightning-fast reactions to shoot those balls from various positions on the court. Trust me, my friend, it's an exhilarating experience that will keep you coming back for more. So, if you're ready to embark on an adrenaline-pumping basketball journey, Flappy Dunk is the game for you. It's the ultimate fusion of flapping, dunking, and pure gaming delight. Get ready to soar through the skies, conquer the pipes, and set new records. The world of Flappy Dunk awaits you!

Item
Type
Severity
Description
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

By severity

Critical1
High3
Medium1
Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.0.15

Files with findings

3 distinct paths — top paths by unique finding count:

  • storage.js3
  • img.js1
  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Credential Theft
critical
storage.js (line 7)The sandboxed page overrides the native `document.cookie` setter to intercept cookie writes. The filter `value.length > 100` specifically targets long cookies, which in practice are authentication tokens and session J…
2Data Exfiltration
high
storage.js (line 20)The extension replaces `window.localStorage` entirely with a custom shim that broadcasts the full serialized localStorage contents to the parent frame on every write using `postMessage` with a wildcard target origin (…
3Remote Code Loading
high
img.js (line 1)This code fetches a server-controlled promo response from `gamestabs.com`, passing the extension's runtime ID as a tracking parameter. The server response dictates both the destination URL (`data.url`) and the image (…
4Unauthorized Data Collection
high
storage.js (line 57)The parent page (`game.html`) receives cookie and localStorage values exfiltrated from the sandboxed iframe and writes them into `chrome.storage.local` for persistent retention across sessions. The `setInterval(report…
5Code Injection
medium
manifest.json (line 8)The sandbox Content Security Policy enables `'unsafe-eval'`, `'unsafe-inline'`, and `blob:` sources across every script-related directive (`script-src`, `object-src`, `child-src`, `worker-src`, `script-src-elem`). Thi…
URLs
30
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

gamestabs.com/ext/img/promo.phphttps://gamestabs.com/ext/img/promo.php?id=
www.apache.org/licenses/LICENSE-2.0.htmlLuckiesthttp://www.apache.org/licenses/LICENSE-2.0.htmlLuckiest
www.astigmatic.com/Licensedhttp://www.astigmatic.com/Licensed
www.w3.org/1999/02/22-rdf-syntax-nshttp://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com/xap/1.0/http://ns.adobe.com/xap/1.0/
ns.adobe.com/xap/1.0/mm/http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com/xap/1.0/sType/ResourceRefhttp://ns.adobe.com/xap/1.0/sType/ResourceRef#
ns.adobe.com/xap/1.0/sType/ResourceEventhttp://ns.adobe.com/xap/1.0/sType/ResourceEvent#
purl.org/dc/elements/1.1/http://purl.org/dc/elements/1.1/
www.gimp.org/xmp/http://www.gimp.org/xmp/
Showing 1 to 10 of 30 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
1.0.1
Latest
1.34 MB
Malicious
5
1.0.2
1.36 MB
Malicious
—
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.