Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Twitch Auto Collect

CRITICAL RISKRemoved from Chrome Web Store

Twitch Auto Collect

ID: icficplcobgmnmfjhphfeknobiiidofo

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇧🇬Bulgarian

🇨🇿Czech

🇩🇰Danish

🇺🇸English

🇪🇪Estonian

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇭🇺Hungarian

🇮🇩Indonesian

🇯🇵Japanese

🇰🇷Korean

🇱🇹Lithuanian

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇹🇷Turkish

🇺🇦Ukrainian

Extension Info & Metadata

Status

Removed

Version

0.0.93

Size

0.17 MB

Rating

3.2/5

Reviews

Users

10,000

Type

Extension

Updated

Jul 29, 2025

Publisher Contextual Analysis

Trusted

Author: spynos123View Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

10,969

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Automate your bonus point collection on Twitch.tv with TwitchAutoCollect

Experience the new way of watching Twitch.tv with TwitchAutoCollect, the Chrome extension designed to simplify and enhance your viewing experience. Key Features: Seamless Functionality: TwitchAutoCollect works flawlessly on Twitch.tv, providing a seamless, enhanced user experience. Automated Collection: The extension automatically clicks bonus point buttons, taking the burden off your shoulders. Simplicity at its Best: All you need to do is start your stream. TwitchAutoCollect will handle the rest, effortlessly accruing Channel Points for you. Multi-Tab and Multi-Channel Support: TwitchAutoCollect isn't just for one tab or channel. It's designed to work effectively across multiple tabs and channels simultaneously. Ready to take your Twitch.tv experience to the next level? Install TwitchAutoCollect today and let us help you maximize your bonus point collection!

User Growth

Showing data from Sep 15, 2022 to Sep 14, 2023

Versions

No change in user count

Compared to 3 months ago

6 versions released in this period

Rating Count

Total: 3 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High4

Medium1

Low0

Versions scanned

Showing 1 of 9 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.0.93 Code review	8

Extension Version	Code Review Findings
0.0.93	8

Files with findings

4 distinct paths — top paths by unique finding count:

background.js5
code.js1
manifest.json1
privacy.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	background.js (line 144)	On first install, the extension queries ALL open browser tabs (not just Twitch) and POSTs each tab's full URL along with a unique install UUID and the extension ID to a remote server at app.jimdox.com/i.php. This cons…	0.0.93
2	Network Interception	critical	background.js (line 65)	Redirect-type rules (sourced from the remote C2 server) intercept main-frame navigations matching arbitrary regex patterns and transparently reroute the browser through the extension's helper.html page, which then rec…	0.0.93
3	Remote Code Loading	critical	background.js (line 17)	The extension fetches a remotely-hosted JSON ruleset from app.jimdox.com/special_service.json (passing the install ID and extension ID as query parameters) and uses it to dynamically program declarativeNetRequest rule…	0.0.93
4	Code Injection	high	privacy.js (line 1)	Injected into every HTTPS page, this script fetches remotely-controlled URL manipulation rules and uses a MutationObserver to continuously rewrite all anchor hrefs on the page — removing specified query parameters and…	0.0.93
5	Data Exfiltration	high	background.js (line 207)	A separate set of link-manipulation rules is fetched from app.jimdox.com/privacy_rules.json with the install ID and extension ID appended as query parameters, allowing the server to fingerprint and serve per-user rule…	0.0.93
6	Tracking	high	code.js (line 29)	Every time a redirect rule fires and the user is redirected, this function sends the original source URL, the modified target URL, and the user's persistent install ID to app.jimdox.com/beacon.php via navigator.sendBe…	0.0.93
7	Unauthorized Data Collection	high	background.js (line 338)	The extension injects privacy.js into every HTTPS page loaded in the browser, not just Twitch pages. Combined with the remotely-fetched rules, this script modifies the href of every anchor element on every page accord…	0.0.93
8	Privilege Escalation	medium	manifest.json (line 39)	The manifest exposes privacy.js, twitch.js, and other internal scripts as web-accessible resources to all origins (:///*). Any malicious web page can load these scripts via the extension's URL, potentially leveragin…	0.0.93

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/uzairfarooq/arrive	https://github.com/uzairfarooq/arrive
app.jimdox.com	/special_service.json	https://app.jimdox.com/special_service.json?a=
app.jimdox.com	/i.php	https://app.jimdox.com/i.php
app.jimdox.com	/privacy_rules.json	https://app.jimdox.com/privacy_rules.json?b=
app.jimdox.com	/beacon.php	https://app.jimdox.com/beacon.php
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

The process is handled automatically from start to finish and its efficiency.

Ninoshka Hodge·19 Aug 2025

Using this made the entire process so much easier, and in the end, I was able to secure all my drops.

Janelle El·19 Aug 2025

Great extension!!! thumbs up 👍

Rory Nelson·18 Aug 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Twitch Auto Collect

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 9 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating