2048 Classic GameSecurity Analysis

Chromev1.1.0MV3February 16, 2026 at 03:15 PM
8.7CRITICAL
8.7 CRITICAL

This extension shows critical risk indicators. It requests highly sensitive permissions combined with suspicious code patterns. Proceed with extreme caution.

Based on 4 permissions including high-risk ones, 9 code findings, 1 dangerous combination.

Dangerous Combinations(1)

CRITICALAll-sites access + keyboard capture

Extension has access to all sites and captures keyboard input — behavior consistent with a keylogger.

<all_urls>+keylogger_pattern
Permissions
9.0/10
Code
8.8/10
Combinations
10.0/10
Manifest/CSP
5.9/10

Permissions(4 analyzed)

Code Findings(8 patterns, 9 total)

Content Security Policy

No CSP Defined(1 issue)
MEDIUM
N/ANo CSP defined

This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.

Manifest Analysis(2 findings)

Resolved from __MSG_* i18n placeholders:

Name: 2048 Classic Game

Description: Boost Your Brainpower with 2048 Classic Game

MEDIUM
web_accessible_resources.matchesOverly broad match patterns

Web-accessible resources use <all_urls> or wildcard patterns, exposing resources to every website.

MEDIUM
content_scriptsContent script injected on all URLs

Content script matches <all_urls>, executing on every website the user visits.

External Domains(2)

github.comwww.google-analytics.com

Indicators of Compromise

5 indicators of compromise found

File Statistics

75
Total Files
3
JS Files
521.1 KB
Total Size

Other Scanned Extensions