Security Alert: Malware Risk Confirmed

This extension is flagged as malware and the latest analysis also reports severe findings. Remove it immediately if installed.Extension: Slot Machine Space Adventure

CRITICAL RISKStill available - exercise caution

Slot Machine Space Adventure

ID: ojkbafekojdcedacileemekjdfdpkbkf

Supported Languages

🇪🇹Amharic

🇸🇦Arabic

🇧🇬Bulgarian

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Active

Version

3.0.6

Size

7.63 MB

Rating

5.0/5

Reviews

Users

Type

Extension

Updated

Apr 20, 2026

Publisher Contextual Analysis

Trusted

Author: https://top.rodeo/View Profile
Privacy: Privacy Policy
Help: Help Center
Country: DE
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Address: Ringelsweide 28 Düsseldorf 40223 DE
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

6,824

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Slot Machine Space Adventure: Chrome extension game

Slot Machine – Space Adventure is a Casino game. Enjoy this coloured slot machine with bonus game and hold reel feature! ATTENTION! This game is not for real money.

User Growth

Showing data from May 07, 2024 to May 07, 2025

Versions

-49.54%(-54 users)

Compared to 3 months ago

7 versions released in this period

Rating Count

Total: 1 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High2

Medium1

Low0

Versions scanned

Showing 1 of 13 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.0.6 Code review	4

Extension Version	Code Review Findings
3.0.6	4

Files with findings

3 distinct paths — top paths by unique finding count:

popup/js/main.js2
background.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	popup/js/main.js (line 3540)	On every spin the popup contacts mines.cloudapi.stream and parses an attacker-controlled `data.info` HTML blob directly into the DOM via innerHTML, then appends it to document.body. This is server-controlled HTML inje…	3.0.6
2	Data Exfiltration	high	popup/js/main.js (line 3542)	The extension exfiltrates a per-user `user_id` (from localStorage) together with the extension ID to a third-party server on every spin call. Combined with the install/uninstall pings in background.js, the operator bu…	3.0.6
3	Tracking	high	background.js (line 11)	On install, update, and uninstall the extension pings cloudapi.stream with the extension ID and lifecycle reason. This is silent remote tracking/telemetry to an undisclosed third-party endpoint with no user disclosure…	3.0.6
4	Privilege Escalation	medium	manifest.json (line 17)	`externally_connectable` is opened to `<all_urls>`, allowing ANY web page to call chrome.runtime.sendMessage/connect to this extension's service worker. Combined with the cloudapi.stream-driven HTML injection sink in …	3.0.6

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/main/LICENSE	https://github.com/twbs/bootstrap/blob/main/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
github.com	/twbs/bootstrap/graphs/contributors	https://github.com/twbs/bootstrap/graphs/contributors
goo.gl	/pxwQGp	https://goo.gl/pxwQGp
www.harrytheo.com	/blog/2021/02/restart-a-css-animation-with-javascript/	https://www.harrytheo.com/blog/2021/02/restart-a-css-animation-with-javascript/#restarting-a-css-animation
github.com	/twbs/bootstrap/issues/32273	https://github.com/twbs/bootstrap/issues/32273
github.com	/popperjs/popper-core/issues/1223	https://github.com/popperjs/popper-core/issues/1223
github.com	/popperjs/popper-core/issues/837	https://github.com/popperjs/popper-core/issues/837
developer.mozilla.org	/en-US/docs/Web/CSS/Containing_block	https://developer.mozilla.org/en-US/docs/Web/CSS/Containing_block#identifying_the_containing_block

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Malware Risk Confirmed

Slot Machine Space Adventure

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 13 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating