Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Uni Terminal

CRITICAL RISKRemoved from Chrome Web Store

Uni Terminal

ID: jdgkkjhbaeanpffcjkdmdnmdladiacgi

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

5.0.0

Size

9.40 MB

Rating

5.0/5

Reviews

Users

8,000

Type

Extension

Updated

Mar 6, 2024

Publisher Contextual Analysis

Author: https://uniterminal.xyzView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: No
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: No
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

8,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Uni Terminal, the first all-in-one terminal for crypto users!

Uni Terminal is a straightforward Chrome extension, similar to browser wallet extensions. Installation is a breeze, and the user interface is intuitive for anyone familiar with crypto extensions. Once installed, Uni Terminal offers a suite of tools to simplify and enhance your crypto experience: For Trading: - Trade Terminal: Customize and choose from popular snipers like Unibot, Maestro, Banana, Wagie, and more. - Charting: Access charts (including potential additions like Dextools and Dexscreener) and tailor your preferences. - "Right Click" Functions: Easily snipe, chart, or scan tokens from any website by highlighting and right-clicking the contract. For Scanning: - Scan Contracts: Instantly scan any contract by highlighting and right-clicking, even from external websites. - Live Pairs: Enjoy free live pairs from DexScreener. - Alpha Signal Bot Partnership: Collaborate with MD Bot for alpha signals. - Token Security Scan Integration: Seamlessly integrate with various scanning bots like PIRB and TTF bot. - Pre-deploy Scanner and Contract Simulator: Utilize TUF for pre-deployment checks. DAPP Integrations: - GambleFi: Access WINR's Just Bet, Sanko Dream machine, and more! - Perpetuals (Perps): Trade GMX, Aark Digital, or Degensbet! Social App Integrations: - Telegram Web: Open Telegram in your browser. - Discord Web: Access Discord within your browser. - FriendTech Web: Open FriendTech in your browser. Uni Terminal streamlines your crypto journey with these tools, making it a must-have extension for crypto enthusiasts.

User Growth

Showing data from Nov 18, 2023 to May 21, 2024

Versions

-27.88%(-3,093 users)

Compared to 3 months ago

6 versions released in this period

Rating Count

Total: 50 ratings

Average Rating

Current: 4.98 / 5.0+4.98

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High0

Medium4

Low2

Versions scanned

Showing 1 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.3.0 Code review	6

Extension Version	Code Review Findings
1.3.0	6

Files with findings

3 distinct paths — top paths by unique finding count:

contentScript.js4
background.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	medium	contentScript.js (line 15988)	The content script (which is injected into every http(s) page per the manifest's 'http:///' / 'https:///' match) polls localStorage for the key 'xtension-token' (Pt = "xtension-token", line 14842) every 1 second a…	1.3.0
2	Credential Theft	medium	background.js (line 186)	The background service worker accepts a 'jwtToken' message and persists it into chrome.storage.local. The sender check uses string includes() ('n.url.includes("https://uniterminal.app/discord")'), which would match an…	1.3.0
3	Tracking	medium	contentScript.js (line 16073)	On every visibilitychange event of every tab on every http(s) site, the extension POSTs the current hostname plus the user's bearer JWT to https://unix-contract-scan-api-test.onrender.com/walletGuard. Even framed as a…	1.3.0
4	Unauthorized Data Collection	medium	manifest.json (line 27)	The 16k-line contentScript.js is injected into every http and https page. The injected script reads localStorage for a fixed key on every site (see finding above), POSTs the hostname of every visited site to a third-p…	1.3.0
5	Tracking	low	contentScript.js (line 15047)	All Telegram trading-bot 'snipe' targets are hardcoded with the maintainer's affiliate / referral codes ('1NRf9L', 'unipal-', 'snp_unipal_', 'GuUreNWV_snipe_', 'UnixT'). When the user invokes the 'Trade' context menu …	1.3.0
6	Unauthorized Data Collection	low	contentScript.js (line 15012)	Production-extension backends are pointed at *.onrender.com infrastructure with names containing '-test' and '-service' (e.g. 'unix-contract-scan-api-test.onrender.com'). User browsing data and bearer JWTs are sent to…	1.3.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

253

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
reactjs.org	/docs/error-decoder.html	https://reactjs.org/docs/error-decoder.html?invariant=
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/XML/1998/namespace	http://www.w3.org/XML/1998/namespace
www.w3.org	/1999/xhtml	http://www.w3.org/1999/xhtml
www.w3.org	/1998/Math/MathML	http://www.w3.org/1998/Math/MathML
reactjs.org	/link/react-polyfills	https://reactjs.org/link/react-polyfills
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/exif/1.0/	http://ns.adobe.com/exif/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/

Showing 1 to 10 of 260 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


4.1.9.2	IPv4	-
3.3.1.2	IPv4	-
26.8.3.3	IPv4	-
6.6.9.8	IPv4	-
5.9.4.7	IPv4	-
1.8.9.3	IPv4	-
3.4.7.4	IPv4	-
3.7.7.1	IPv4	-
4.4.2.5	IPv4	-
5.2.1.7	IPv4	-
2.1.6.3	IPv4	-
7.4.6.1	IPv4	-
50.5.1.3	IPv4	-
5.6.5.3	IPv4	-
6.6.6.1	IPv4	-
4.6.6.4	IPv4	-
3.4.7.7	IPv4	-
5.7.2.1	IPv4	-
7.6.3.2	IPv4	-
1.1.7.8	IPv4	-
2.7.6.7	IPv4	-
5.6.6.5	IPv4	-
1.1.2.1	IPv4	-
3.2.3.1	IPv4	-
7.6.9.8	IPv4	-
4.3.9.1	IPv4	-
4.6.3.9	IPv4	-
5.1.6.7	IPv4	-
2.5.4.9	IPv4	-
3.16.62.29	IPv4	-
8.8.1.2	IPv4	-
1.5.4.5	IPv4	-
8.2.3.4	IPv4	-
5.2.8.6	IPv4	-
3.6.7.8	IPv4	-
1.2.2.3	IPv4	-
11.2.7.8	IPv4	-
14.6.2.5	IPv4	-
1.3.9.9	IPv4	-
3.2.6.1	IPv4	-
4.2.6.5	IPv4	-
1.2.6.3	IPv4	-
3.1.2.4	IPv4	-
2.2.2.4	IPv4	-
6.4.4.2	IPv4	-
1.6.2.9	IPv4	-
5.4.9.9	IPv4	-
1.3.6.5	IPv4	-
3.3.2.9	IPv4	-
1.4.9.6	IPv4	-
1.4.7.1	IPv4	-
19.2.3.3	IPv4	-
4.4.7.1	IPv4	-
6.2.4.4	IPv4	-
7.4.4.8	IPv4	-
7.5.1.2	IPv4	-
1.1.1.5	IPv4	-
9.1.9.7	IPv4	-
4.3.4.6	IPv4	-
11.3.2.4	IPv4	-
1.1.4.1	IPv4	-
5.2.7.7	IPv4	-
1.5.9.5	IPv4	-
9.1.9.8	IPv4	-
2.4.7.7	IPv4	-
1.9.3.8	IPv4	-
2.2.1.8	IPv4	-
82.25.24.16	IPv4	-
43.39.55.66	IPv4	-
12.27.15.56	IPv4	-
2.21.33.48	IPv4	-
1.19.27.38	IPv4	-
17.71.41.99	IPv4	-
12.4.7.8	IPv4	-
2.1.3.3	IPv4	-
3.3.6.6	IPv4	-
2.1.1.7	IPv4	-
4.1.5.3	IPv4	-
216.108.46.136	IPv4	-
115.193.24.37	IPv4	-

Showing 1 to 80 of 80 rows

Rows per page:

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Very helpful!

Maxal Seo·20 Apr 2024

Uni Terminal Very Good Project guys... Use my invitation code : wnqyp

Limon Khan·26 Jan 2024

sleek interface and terminal. It's going to change the trading game!

Tags Store·23 Jan 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Uni Terminal

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 6 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating