[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

CS2 Case Opening Stats

Version 1.9.4 View in Chrome Web Store

Last scanned: about 4 hours ago

Extension Details

Developer: lootspectrum.com

Rating: 3.9 ★ (95 ratings)

Users: 100,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a substantial user base of 100,000 users and a decent rating of 3.9/5 stars, indicating reasonable user satisfaction. The developer appears to be associated with lootspectrum.com, which suggests a legitimate gaming-related service. The extension's purpose aligns with CS2 (Counter-Strike 2) case opening statistics tracking, which is a common interest in the gaming community.

Concerns: The primary concern is the combination of storage and unlimitedStorage permissions, which allows the extension to store unlimited amounts of data locally on your device. While these permissions are somewhat justified for tracking case opening statistics over time, the unlimited storage capability could potentially be misused. The content scripts have access to Steam Community inventory history pages, which contain sensitive gaming asset information. The extension also communicates with lootspectrum.com domains, raising questions about what data might be transmitted externally.

Recommendations: This extension appears legitimate for its stated purpose, but exercise caution with your Steam inventory data. Monitor your device's storage usage if you install this extension due to the unlimited storage permission. Consider reviewing the extension's privacy policy on lootspectrum.com to understand how your data is handled. If you're particularly security-conscious, you could run this extension in a separate Chrome profile dedicated to gaming activities to isolate it from your primary browsing data.

Findings

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

storage
unlimitedStorage

Optional Permissions:

tabs

Embedded URLs (14 total):

https://steamcommunity.com/id/me/inventoryhistory/	https://lootspectrum.com/login
https://api.lootspectrum.com/functions/v1/debug-log	https://community.akamai.steamstatic.com/economy/image/-9a81dlWLwJ2UUGcVs_nsVtzdOEdtWwKGZZLQHTxDZ7I56KU0Zwwo4NUX4oFJZEHLbXQ9Q1LO5kNoBhSQl-fROuh28rQR1R2KglqLQFFaA9ufLPHfikzs9vpxtCOmcj7PY7dl3hX-MROhuDG_Zi7jgDkrlFkNzv7I4PHJAdva--AwlLqwrvkhrn8uJ7IwHMypGB8ssw_Ug/94fx94f
https://lootspectrum.com/see-more	https://lootspectrum.com
https://lootspectrum.com/partner	https://community.cloudflare.steamstatic.com/economy/image/
http://www.w3.org/2000/svg	https://lootspectrum.com/how-to
https://clients2.google.com/service/update2/crx	https://steamcommunity.com/id/
https://steamcommunity.com/profiles/	https://steamcommunity.com/

Raw Manifest

{
  "name": "CS2 Case Opening Stats",
  "icons": {
    "16": "assets/icon16.png",
    "48": "assets/icon48.png",
    "64": "assets/icon64.png",
    "128": "assets/icon128.png"
  },
  "action": {
    "resources": [
      "popup/popup.css"
    ],
    "default_popup": "popup/popup.html"
  },
  "version": "1.9.4",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "The ultimate tool for tracking, analyzing and visualizing your Counterstrike inventory history.",
  "permissions": [
    "storage",
    "unlimitedStorage"
  ],
  "content_scripts": [
    {
      "js": [
        "content/config.js",
        "content/utils.js",
        "content/domManipulation.js",
        "content/dataProcessing.js",
        "content/chunkManagement.js",
        "content/caseScript.js",
        "content/steamLoginCheck.js"
      ],
      "css": [
        "styles/caseAnalytics.css"
      ],
      "matches": [
        "https://steamcommunity.com/id/*/inventoryhistory/*",
        "https://steamcommunity.com/profiles/*/inventoryhistory/*"
      ]
    },
    {
      "js": [
        "content/chunkManagement.js",
        "content/syncData.js",
        "content/relay.js"
      ],
      "matches": [
        "*://*.lootspectrum.com/*"
      ]
    }
  ],
  "manifest_version": 3,
  "optional_permissions": [
    "tabs"
  ],
  "web_accessible_resources": [
    {
      "matches": [
        "https://steamcommunity.com/*"
      ],
      "resources": [
        "content/inject.js",
        "html/casebox.html",
        "html/finishedBox.html",
        "styles/caseAnalytics.css",
        "styles/finished.css",
        "popup/popup.css",
        "assets/*"
      ]
    }
  ],
  "optional_host_permissions": [
    "https://*.steamcommunity.com/*"
  ]
}

by ✦ Astarte

CS2 Case Opening Stats

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Embedded URLs (14 total):

Raw Manifest

Detections

Manifest Findings