Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Super Mario

CRITICAL RISKRemoved from Chrome Web Store

Super Mario

ID: cohmkcfhincjlpijlammepdbdfbfjdnp

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.1.2

Size

0.03 MB

Rating

4.8/5

Reviews

572

Users

113,754

Type

Extension

Updated

Oct 19, 2019

Publisher Contextual Analysis

Author: majestic-codeView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

113,754

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

The Classic Super Mario Game Is Now Available On Your Chrome - Play Super Mario Bros As Much As You Want!

Welcome aboard! Thanks for trying out our new Super Mario game extension! This extension will allow you to play classic Super Mario game right from your Chrome browser, for hours of fun! Super Mario is a retro, favorite and very addictive game that you will play for days on end. Your goal is to make Mario collect coins, hit boxes and get powerups, jump on the evil mushrooms, turtles and plants and slide up and down pipes, all just to rescue Princess Peach from the evil Bowser! To get our Super Mario game extension, simply add it to your Chrome browser right now! We want to make our Super Mario game extension the best around. If you find bugs, want more features, have any questions or just have some feedback for us, feel free to contact us by giving us a comment or a review! If you want to remove our Super Mario game extension, all you have to do is right-click on the Super Mario game extension icon in your browser and select "Remove from Chrome...". Thank you so much for joining us on our Super Mario game extension adventure! Have fun!

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High1

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.2 Code review	4

Extension Version	Code Review Findings
1.1.2	4

Files with findings

3 distinct paths — top paths by unique finding count:

background.js2
game.html1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	critical	manifest.json (line 33)	The CSP explicitly whitelists `https://pix.2048-game.review` as a trusted script source alongside `unsafe-eval`. This intentionally grants the third-party tracking domain the ability to execute arbitrary JavaScript in…	1.1.2
2	Remote Code Loading	critical	background.js (line 69)	The background page dynamically injects a remote script (`trckng_base.js`) from `pix.2048-game.review` — a domain with no relationship to the advertised Super Mario game. The script receives a persistent user UID, ext…	1.1.2
3	Tracking	high	background.js (line 58)	The extension generates and persists a unique user identifier (UID) in local storage and transmits it to `pix.2048-game.review` both during active sessions (via the analytics script URL) and upon uninstall (via `setUn…	1.1.2
4	Other	medium	game.html (line 14)	The extension's entire user-facing functionality is an iframe embedding a third-party game site — no local game assets are bundled. This thin wrapper pattern (real functionality = iframe to external site) is a common …	1.1.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


pix.2048-game.review	/miss-you	https://pix.2048-game.review/miss-you?ext=
pix.2048-game.review	-	https://pix.2048-game.review
fflashgames.com	/super-mario-bros-1217.html	https://fflashgames.com/super-mario-bros-1217.html
www.google-analytics.com	-	https://www.google-analytics.com
ssl.google-analytics.com	-	https://ssl.google-analytics.com
pix.2048-game.review;	-	https://pix.2048-game.review;
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

It is a virus totally a virus i deleted it

lilly horton·14 May 2021

okay this is weird, when I click the extension nothing happens sooo I right click it and click super Mario then it brings me to the extension on the chrome web store right here

Joshua Zorzut·5 May 2021

so laagy and horibel do not isntalkl feaijk horibel bad rlly bad

ΛΛ

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Super Mario

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews