Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: RoSniper

CRITICAL RISKRemoved from Chrome Web Store

RoSniper

ID: nddpoaebnalejnlidgcedobiggfcfhop

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.5

Size

0.07 MB

Rating

4.1/5

Reviews

Users

20,000

Type

Extension

Updated

Apr 16, 2024

Publisher Contextual Analysis

Author: SJNIView Profile
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

20,057

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Snipe any roblox player with only their username.

Join anyone's server without being their friend.(MUST USE CORRECT CAPITILIZATION) Tutorial: Go to the game where the person you want to find is in, go to the server's option in Roblox and there will be a box for you to type the name of whoever you need to find then it will automatically show you the server highlighted by a green box for you to easily join your friend. Support Server: https://discord.gg/Phu5PARZU8 Source Code: https://github.com/RobloxTestr/RoSniper Showcase: https://www.youtube.com/watch?v=wAVXl-dT4ls Website: https://sniper.tokyo/ -- FASTEST ON THE MARKET. -- Update 1.5: -WORKS FOR BIGGER GAMES LIKE BLOXFRUITS AND BROOKHAVEN NOW. -FASTER IN SMALLER GAMES. -NEW SHOWCASE VIDEO. **FULL REVAMP COMING SOON**

User Growth

Showing data from May 11, 2023 to May 09, 2024

Versions

+81.31%(+8,969 users)

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 69 ratings+2 (3%)

Average Rating

Current: 4.03 / 5.0+4.03

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low1

Versions scanned

Showing 1 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1 Code review	5

Extension Version	Code Review Findings
1.1	5

Files with findings

2 distinct paths — top paths by unique finding count:

content.js3
background.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Tracking	high	content.js (line 123)	Core tracking/stalking functionality: matches a specific target user's avatar thumbnail against the harvested thumbnails of every player on every public server, then surfaces and provides a Join button to enter that u…	1.1
2	Unauthorized Data Collection	high	content.js (line 85)	Bulk-harvests every active public server's player tokens (privacy-sensitive identifiers) for an entire Roblox game by paginating up to 150 cursor pages of 100 servers each. This is non-consensual mass collection of al…	1.1
3	Other	medium	content.js (line 17)	Both helpers retry indefinitely on any non-OK response with a sleep of 0.000000000001 seconds (effectively zero), creating an unbounded request flood loop against Roblox's games and thumbnails endpoints whenever rate-…	1.1
4	Privilege Escalation	medium	background.js (line 35)	The service worker accepts an arbitrary {place, id} message from any extension context and uses chrome.scripting.executeScript with world:'MAIN' to invoke window.Roblox.GameLauncher.joinGameInstance in the page's real…	1.1
5	Code Injection	low	background.js (line 1)	The URL gate uses an unanchored regex /https:\/\/.+roblox.com\/games/g which matches any URL whose path/host merely contains the substring 'roblox.com/games' (e.g. https://attacker.com/?x=roblox.com/games). Combined w…	1.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


${url}`	-	https://${url}`
${url}`,	-	https://${url}`,
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*.roblox.com	/games/	https://*.roblox.com/games/

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

W extension, u can hunt someone

Kevin Kristian·17 May 2024

Simple but works. It works in a weird way but I like it :)

Arion gamer·15 May 2024

does not work(((

ЕЗ

Егор Захаров·15 May 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

RoSniper

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating