Security Alert: Critical Security Risk

Automated analysis found severe security findings in this version. Review the Security Analysis tab before trusting this extension.Extension: gn-math

CRITICAL RISK

gn-math

ID: alimemilmgmjinhoefllhhcgikphoddb

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

1.1

Size

0.01 MB

Rating

4.3/5

Reviews

Users

1,000

Type

Extension

Updated

Feb 26, 2026

Publisher Contextual Analysis

Trusted

Author: https://gn-math.dev/View Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

1,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Play unlimited unblocked games only at gn-math.github.io!

GN-Math is the ultimate unblocked games hub, now packed into a powerful and lightweight Chrome extension. Instantly access a massive collection of high-quality browser games—directly from your toolbar. From classics to completely exclusive titles you won’t find anywhere else, GN-Math brings you fresh, addictive games that other sites don’t even know exist. Whether you're bored in class, taking a break at work, or just need some quick fun, GN-Math loads fast, runs smooth, and works around most school or network blocks. No more searching. No more dead links. Just click and play. 🔓 Fully Unblocked 🎮 Tons of Unique & Exclusive Games ⚡ One-Click Instant Access 🧠 Disguised as a “Math” Tool GN-Math is not just another extension—it’s a game-changer. Add it now and discover what other unblocked sites are missing.

User Growth

Showing data from Jul 19, 2025 to Jul 18, 2026

Versions

-50%(-1,000 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 4 ratings

Average Rating

Current: 4.25 / 5.0+4.25

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High3

Medium2

Low0

Versions scanned

Showing 2 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1 Code review	2
1.0 Code review	5

Extension Version	Code Review Findings
1.1	2
1.0	5

Files with findings

1 distinct path — top paths by unique finding count:

index.html7

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	index.html (line 9)	After fetching remote HTML, the code clones each <script> tag into a freshly created script element and appends it to document.body, which forces the browser to execute it. This is functionally equivalent to eval() of…	1.1
2	Remote Code Loading	critical	index.html (line 1)	The extension fetches arbitrary HTML from a third-party CDN (jsdelivr serving content from the GitHub repo 'gn-math/gn-math-DONTDMCA') at runtime, replaces the entire document with that HTML, and then re-executes ever…	1.1
3	Network Interception	high	index.html (line 1073)	The extension monkey-patches window.fetch and XMLHttpRequest.prototype.open to silently reject any request to a hard-coded list of school content-monitoring services (GoGuardian, Securly, Lightspeed, Linewize, Deledao…	1.0
4	Remote Code Loading	high	index.html (line 622)	The extension fetches HTML from an attacker-controllable CDN URL (cdn.jsdelivr.net/gh/gn-math/html@main, configurable through the zones.json manifest also fetched remotely), replaces the entire document, then iterates…	1.0
5	Remote Code Loading	high	index.html (line 7)	The extension's main UI page sets <base> to a remote CDN-hosted GitHub repo and unconditionally loads gnmath.js from the same repo, plus a remote zones.json manifest that drives subsequent HTML fetches. All executable…	1.0
6	Credential Theft	medium	index.html (line 576)	saveData serializes the entire localStorage and document.cookie of the sandboxed extension origin into a downloadable .data file, and loadData accepts an arbitrary user-supplied file and writes its contents back into …	1.0
7	Obfuscation	medium	index.html (line 950)	A built-in 'Tab Cloak' feature lets the user rewrite the document title and favicon to arbitrary user-supplied values, with the explicit purpose of disguising the tab as something else (commonly Google Docs/Classroom)…	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


cdn.jsdelivr.net	/gh/gn-math/gn-math-DONTDMCA@main/singlefile.html	https://cdn.jsdelivr.net/gh/gn-math/gn-math-DONTDMCA@main/singlefile.html?t=
gn-math.dev	-	https://gn-math.dev
gn-math.dev	-	https://gn-math.dev/

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.0 out of 5 · 3 most recent reviews

Text reviews

Positive

Negative

doesn't work?

Idrees Khokhar STUDENT·11 Feb 2026

W site

Hutchinsan·25 Jul 2025

very cool and tuff

ne8·25 Jul 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Critical Security Risk

gn-math

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating