[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

CS2 Case Opening Stats

Version 1.9.4 View in Chrome Web Store

Last scanned: 1 day ago | force re-scan

Extension Details

Developer: lootspectrum.com

Rating: 3.9 ★ (93 ratings)

Users: 100,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a substantial user base of 100,000 users and maintains a decent 3.9-star rating from 93 reviews, indicating reasonable user satisfaction. The developer is associated with lootspectrum.com, which appears to be a legitimate gaming statistics website. The extension uses Manifest V3, showing compliance with modern Chrome security standards.

Concerns:

The primary concern is the combination of storage and unlimitedStorage permissions, which allows the extension to store unlimited amounts of data on your device. While these permissions align with the extension's purpose of tracking case opening statistics, the unlimited storage capability could potentially be misused. The content scripts have access to Steam Community inventory history pages, which contain sensitive gaming asset information. The extension also communicates with lootspectrum.com domains, creating a data flow pathway that users should be aware of.

Recommendations:

This extension appears legitimate for CS2 players wanting to track their case opening statistics. The permissions are generally appropriate for its stated function. However, monitor your browser's storage usage if you notice performance issues. Consider the privacy implications of sharing your Steam inventory data with third-party services. If you're particularly privacy-conscious, you could run this extension in a separate Chrome profile dedicated to gaming activities to isolate any potential data collection from your main browsing profile.

Findings

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

storage
unlimitedStorage

Optional Permissions:

tabs

Embedded URLs (14 total):

https://steamcommunity.com/id/me/inventoryhistory/	https://lootspectrum.com/login
https://api.lootspectrum.com/functions/v1/debug-log	https://community.akamai.steamstatic.com/economy/image/-9a81dlWLwJ2UUGcVs_nsVtzdOEdtWwKGZZLQHTxDZ7I56KU0Zwwo4NUX4oFJZEHLbXQ9Q1LO5kNoBhSQl-fROuh28rQR1R2KglqLQFFaA9ufLPHfikzs9vpxtCOmcj7PY7dl3hX-MROhuDG_Zi7jgDkrlFkNzv7I4PHJAdva--AwlLqwrvkhrn8uJ7IwHMypGB8ssw_Ug/94fx94f
https://lootspectrum.com/see-more	https://lootspectrum.com
https://lootspectrum.com/partner	https://community.cloudflare.steamstatic.com/economy/image/
http://www.w3.org/2000/svg	https://lootspectrum.com/how-to
https://clients2.google.com/service/update2/crx	https://steamcommunity.com/id/
https://steamcommunity.com/profiles/	https://steamcommunity.com/

Raw Manifest

{
  "name": "CS2 Case Opening Stats",
  "icons": {
    "16": "assets/icon16.png",
    "48": "assets/icon48.png",
    "64": "assets/icon64.png",
    "128": "assets/icon128.png"
  },
  "action": {
    "resources": [
      "popup/popup.css"
    ],
    "default_popup": "popup/popup.html"
  },
  "version": "1.9.4",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "The ultimate tool for tracking, analyzing and visualizing your Counterstrike inventory history.",
  "permissions": [
    "storage",
    "unlimitedStorage"
  ],
  "content_scripts": [
    {
      "js": [
        "content/config.js",
        "content/utils.js",
        "content/domManipulation.js",
        "content/dataProcessing.js",
        "content/chunkManagement.js",
        "content/caseScript.js",
        "content/steamLoginCheck.js"
      ],
      "css": [
        "styles/caseAnalytics.css"
      ],
      "matches": [
        "https://steamcommunity.com/id/*/inventoryhistory/*",
        "https://steamcommunity.com/profiles/*/inventoryhistory/*"
      ]
    },
    {
      "js": [
        "content/chunkManagement.js",
        "content/syncData.js",
        "content/relay.js"
      ],
      "matches": [
        "*://*.lootspectrum.com/*"
      ]
    }
  ],
  "manifest_version": 3,
  "optional_permissions": [
    "tabs"
  ],
  "web_accessible_resources": [
    {
      "matches": [
        "https://steamcommunity.com/*"
      ],
      "resources": [
        "content/inject.js",
        "html/casebox.html",
        "html/finishedBox.html",
        "styles/caseAnalytics.css",
        "styles/finished.css",
        "popup/popup.css",
        "assets/*"
      ]
    }
  ],
  "optional_host_permissions": [
    "https://*.steamcommunity.com/*"
  ]
}

by ✦ Astarte

CS2 Case Opening Stats

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Embedded URLs (14 total):

Raw Manifest

Detections

Manifest Findings