Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Prodigy Hacking Extension (PHEx)

CRITICAL RISKRemoved from Chrome Web Store

Prodigy Hacking Extension (PHEx)

ID: gjabpajagbgoifbkflgojeojmnlmioea

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

2.1.8

Size

0.04 MB

Rating

3.7/5

Reviews

438

Users

100,000

Type

Extension

Updated

Jan 25, 2022

Publisher Contextual Analysis

Author: http://prodigyhacking.comView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

100,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

PHEx is an extension made to raise awareness of security issues for Prodigy

The goal of the Prodigy Hacking Organization is to raise awareness of the game security issues that SMARTeacher has blatantly ignored. This is a Chrome extension that allows users of SMARTeacher products (currently: Prodigy) to explore security issues within the game without exposing any functionality that could be damaging to another user's expierence. For more information, see https://prodigyhacking.com We do NOT collect any information on you or anything else. We do not see profits from you or anyone else. Our code is 100% open source, and you can view our code and other projects at https://github.com/Prodigy-Hacking Prodigy Hacking is in no way associated with Prodigy Math Game or SMARTeacher.

User Growth

Showing data from Jan 01, 2022 to Apr 06, 2022

Versions

+100%(+50,000 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 438 ratings+7 (2%)

Average Rating

Current: 3.67 / 5.0-0.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High1

Medium2

Low0

Versions scanned

Showing 1 of 11 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.0.0 Code review	6

Extension Version	Code Review Findings
2.0.0	6

Files with findings

3 distinct paths — top paths by unique finding count:

background.js3
disableIntegrity.js2
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	background.js (line 7)	Removes Content-Security-Policy and X-Frame-Options response headers from every URL the user visits (`<all_urls>`), not just prodigygame.com. Stripping CSP globally eliminates XSS protections on every website; strippi…	2.0.0
2	Remote Code Loading	critical	disableIntegrity.js (line 1)	Creates a <script> element whose src is `prodigyhacking.ml/game.min.js` — an external domain fully controlled by the extension publisher — and appends it to the page body. This injects and executes arbitrary, unreview…	2.0.0
3	Remote Code Loading	critical	background.js (line 17)	Cancels loading of the game's official game.min.js and redirects public-game bundles to `prodigyhacking.ml`, substituting publisher-controlled JavaScript for the legitimate signed game code. Combined with the SRI stri…	2.0.0
4	Code Injection	high	disableIntegrity.js (line 24)	Strips the `integrity` attribute from every script and link element already present in the DOM, neutralising Subresource Integrity validation across the entire page. This is a targeted security-bypass step that exists…	2.0.0
5	Network Interception	medium	background.js (line 36)	Intercepts the game's character API and rewrites query parameters to force `isMember=1`, bypassing the game's paid-membership server-side check. While primarily a terms-of-service violation rather than a direct threat…	2.0.0
6	Other	medium	manifest.json (line 7)	The bundled manifest is missing two permissions that appear in the published/live CWS manifest: `https://raw.githubusercontent.com/*` and `storage`. This discrepancy suggests the extension was updated to request addit…	2.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


hacks.prodigyhacking.com	-	https://hacks.prodigyhacking.com
code.prodigygame.com	/code/	https://code.prodigygame.com/code/
raw.githubusercontent.com	/Prodigy-Hacking/ProdigyMathGameHacking/master/PHEx/status.json	https://raw.githubusercontent.com/Prodigy-Hacking/ProdigyMathGameHacking/master/PHEx/status.json
unpkg.com	/sweetalert2	https://unpkg.com/sweetalert2
discord.gg	/XQDfbfq	https://discord.gg/XQDfbfq
code.prodigygame.com	/js/public-game	https://code.prodigygame.com/js/public-game
code.prodigygame.com	/code/*/game.min.js	https://code.prodigygame.com/code//game.min.js?v=
code.prodigygame.com	/js/public-game-*.min.js	https://code.prodigygame.com/js/public-game-*.min.js
code.prodigygame.com	/code/3-13-0/game.min.js	https://code.prodigygame.com/code/3-13-0/game.min.js?v=3-13-0
github.com	/Prodigy-Hacking/ProdigyMathGameHacking/wiki/How-to-Update	https://github.com/Prodigy-Hacking/ProdigyMathGameHacking/wiki/How-to-Update

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

buttcheeks

tony baloney·5 Apr 2022

So gooooooooooooooooooood and it worked!

Ethan Sun·4 Apr 2022

my exprience with this: only use 4 hacks or less. I would suggest: get all pets,set level,obtain all items, obtain 99 conjure cubes.

ethan sun·4 Apr 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Prodigy Hacking Extension (PHEx)

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 11 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews