Security Alert: Malware Risk Confirmed

This extension is flagged as malware and the latest analysis also reports severe findings. Remove it immediately if installed.Extension: Mini Golf World

CRITICAL RISKStill available - exercise caution

Mini Golf World

ID: kblomapfkjidbbbdllmofkcakcenkmec

Supported Languages

🇸🇦Arabic

🇧🇬Bulgarian

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇱Hebrew

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Active

Version

2.5.2

Size

38.98 MB

Rating

5.0/5

Reviews

Users

470

Type

Extension

Updated

Apr 27, 2026

Publisher Contextual Analysis

Author: YanaProjectView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

3,301

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Mini Golf World: Chrome extension game

Minigolf World is a HTML5 Sport Game. Let the soothing sound of chirping birds accompany you through the 18 holes of this addicting mini golf. Shoot the ball in all the holes with the least hits possible. Avoid all the obstacles and be crafty not only powerful!

User Growth

Showing data from May 22, 2024 to May 22, 2025

Versions

-20.15%(-132 users)

Compared to 3 months ago

8 versions released in this period

Rating Count

Total: 1 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High3

Medium1

Low0

Versions scanned

Showing 1 of 12 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.5.2 Code review	6

Extension Version	Code Review Findings
2.5.2	6

Files with findings

2 distinct paths — top paths by unique finding count:

manifest.json4
background.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	critical	manifest.json (line 17)	The extension declares `externally_connectable` with `<all_urls>`, meaning ANY webpage on the internet can send it `chrome.runtime.sendMessage()` calls. Combined with the embedded OAuth2 client ID requesting Google em…	2.5.2
2	Unauthorized Data Collection	critical	manifest.json (line 29)	The extension embeds an OAuth2 client ID and requests Google `userinfo.email` and `userinfo.profile` scopes. A mini golf game has no legitimate reason to obtain the user's Google identity. This configuration enables t…	2.5.2
3	Data Exfiltration	high	manifest.json (line 36)	The extension holds host permissions against two subdomains of `cloudapi.stream` (`wheel` and `mines`) in addition to all of `googleapis.com`. These subdomains use generic, plausible-sounding names that could masquera…	2.5.2
4	Tracking	high	background.js (line 9)	On every install or update, the extension forcibly opens a tab to `cloudapi.stream` and transmits the install/update reason and the extension's unique runtime ID as query parameters. The runtime ID is persistent and u…	2.5.2
5	Tracking	high	background.js (line 20)	The extension registers an uninstall callback to the same `cloudapi.stream` domain, transmitting the unique extension runtime ID when the user removes the extension. Together with the install/update beacon, this gives…	2.5.2
6	Code Injection	medium	manifest.json (line 11)	The sandbox CSP explicitly allows `unsafe-inline` and `unsafe-eval`, effectively disabling script injection protections within sandboxed extension pages. While the main extension pages have a tighter policy, the sandb…	2.5.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/main/LICENSE	https://github.com/twbs/bootstrap/blob/main/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
github.com	/twbs/bootstrap/graphs/contributors	https://github.com/twbs/bootstrap/graphs/contributors
goo.gl	/pxwQGp	https://goo.gl/pxwQGp
www.harrytheo.com	/blog/2021/02/restart-a-css-animation-with-javascript/	https://www.harrytheo.com/blog/2021/02/restart-a-css-animation-with-javascript/#restarting-a-css-animation
github.com	/twbs/bootstrap/issues/32273	https://github.com/twbs/bootstrap/issues/32273
github.com	/popperjs/popper-core/issues/1223	https://github.com/popperjs/popper-core/issues/1223
github.com	/popperjs/popper-core/issues/837	https://github.com/popperjs/popper-core/issues/837
developer.mozilla.org	/en-US/docs/Web/CSS/Containing_block	https://developer.mozilla.org/en-US/docs/Web/CSS/Containing_block#identifying_the_containing_block

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Malware Risk Confirmed

Mini Golf World

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 12 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating