Extension Auditor
Extension Auditor
Sign Up
Game of Sean

Game of Sean

ID: cjklkcpgnmdcnkepkndbmnajaibdmcaj

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
3.5.1
Size
0.15 MB
Rating
4.6/5
Reviews
17
Users
30
Type
Extension
Updated
May 5, 2025
Category
Games
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
seansgame.comView Profile
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Total Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Total Users
30

Email Change History

1 change
Oct 16, 2024
Domain changed
Screenshot 2

Protect, and fight for Sean. Sean makes a fun leader.

Sean's game features many levels where you protect Sean from enemies, train, earn bling. You can buy upgrades to enhance your experience, such as increasing Sean's bullet speed, contracting Sean to work for you. There is a exciting multiplayer mode, where you can fight your friends, or fight the boss. Sean will be forever indebted to you if you play 💖

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

The extension injects the Mellowtel SDK into every web page at the earliest possible execution point (`document_start`) across all frames. Mellowtel is a residential-proxy monetization library that routes third-party HTTP/HTTPS traffic through the user's browser and IP address. The CWS listing declares no data collection categories, and the game description contains no disclosure of bandwidth sharing, making this an undisclosed data/resource collection practice against CWS policy.

manifest.json (Line 40)
{  "matches": [    "<all_urls>"  ],  "js": [    "content_start_mellowtel.js"  ],  "run_at": "document_start",  "all_frames": true}

The bundled manifest contains `declarativeNetRequest` (allowing network request blocking and redirection) and `<all_urls>` host_permissions, neither of which appear in the published CWS manifest summary (which lists only `storage`). This discrepancy means the permission scope shown to potential users on the store page is materially less than what the installed extension actually holds — a hiding of capabilities consistent with covert SDK integration.

manifest.json (Line 15)
"permissions": ["storage", "declarativeNetRequest"],..."host_permissions": [    "<all_urls>"  ],

By severity

Critical0
High2
Medium0
Low0

Versions scanned

Showing 1 of 17 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
3.5.12

Files with findings

1 distinct path — top paths by unique finding count:

  • manifest.json2
S.No.
Category
Severity
File
Summary
Found in Version
1Other
high
manifest.json (line 15)The bundled manifest contains `declarativeNetRequest` (allowing network request blocking and redirection) and `<all_urls>` host_permissions, neither of which appear in the published CWS manifest summary (which lists o…
3.5.1
2Unauthorized Data Collection
high
manifest.json (line 40)The extension injects the Mellowtel SDK into every web page at the earliest possible execution point (`document_start`) across all frames. Mellowtel is a residential-proxy monetization library that routes third-party …
3.5.1
URLs
53
IPv4
1
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
speed.cloudflare.com-https://speed.cloudflare.com
aim.cloudflare.com/__loghttps://aim.cloudflare.com/__log
afcha2nmzsir4rr4zbta4tyy6e0fxjix.lambda-url.us-east-1.on.aws-https://afcha2nmzsir4rr4zbta4tyy6e0fxjix.lambda-url.us-east-1.on.aws/
www.mellow.tel-https://www.mellow.tel/
m-bucket-light.s3.amazonaws.com/lightning-boltrepo-com.svghttps://m-bucket-light.s3.amazonaws.com/lightning-boltrepo-com.svg
mellowtel-bucket.s3.us-east-1.amazonaws.com/lightning-boltrepo-com.svghttps://mellowtel-bucket.s3.us-east-1.amazonaws.com/lightning-boltrepo-com.svg
ti6sritai2y2cqwc23byo7iobm0vfpsg.lambda-url.us-east-1.on.aws-https://ti6sritai2y2cqwc23byo7iobm0vfpsg.lambda-url.us-east-1.on.aws
docs.google.com/viewerhttps://docs.google.com/viewer?url=${A}`
www.w3.org/2000/svghttp://www.w3.org/2000/svg
5xpb4fkh75h5s4vngnzy6oowcy0cgahe.lambda-url.us-east-1.on.aws-https://5xpb4fkh75h5s4vngnzy6oowcy0cgahe.lambda-url.us-east-1.on.aws/
Showing 1 to 10 of 60 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
127.0.0.1
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
3.3.0
Latest
1.20 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
3.2.0
1.20 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
3.1.0
1.20 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
3.0.2
1.20 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
3.0.1
1.20 MB
Benign
—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
3.0.0
1.20 MB
Benign
—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
2.3.0
1.19 MB
Benign
—
efdfdecb64ab692a10a22159e6e03f859fc20a5c297c4a788c3c2248783eb0f9
2.2.0
1.19 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.1.1
0.04 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.1
0.02 MB
Benign
—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In