[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Ultrakill - Unblocked FPS Game

Version 1.1 View in Chrome Web Store

Last scanned: about 6 hours ago

Extension Details

Developer: unblockedhub.com

Rating: 5.0 ★ (5 ratings)

Users: 3,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 1 total findings, including 1 high-risk finding.

Findings

HIGH

Unsafe WebAssembly Execution

This extension's Content Security Policy allows 'wasm-unsafe-eval', which permits potentially dangerous WebAssembly code execution. This could be used to hide malicious code or perform CPU-intensive operations.

Raw Manifest

{
  "name": "__MSG_appName__",
  "icons": {
    "128": "/icon/ultrakill-128x128.png"
  },
  "action": {
    "default_icon": "/icon/ultrakill-128x128.png",
    "default_title": "Ultrakill FPS Game"
  },
  "sandbox": {
    "pages": [
      "index.html"
    ]
  },
  "version": "1.1",
  "background": {
    "service_worker": "/background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "default_locale": "en",
  "manifest_version": 3,
  "content_security_policy": {
    "sandbox": "sandbox allow-scripts allow-forms allow-popups allow-modals allow-pointer-lock; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; child-src 'self' blob:;",
    "extension_pages": "script-src 'self' 'wasm-unsafe-eval'; object-src 'self'"
  }
}

by ✦ Astarte

https://unblockedhub.com	https://unblockedhub.com/game/ultrakill-unblocked-fps-game/4602
https://clients2.google.com/service/update2/crx	https://bugzilla.mozilla.org/show_bug.cgi?id=1397977
https://github.com/w3c/mediacapture-main/issues/905	https://bugs.webkit.org/show_bug.cgi?id=217578
https://bugzilla.mozilla.org/show_bug.cgi?id=1670675

Ultrakill - Unblocked FPS Game

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Content Security Policy:

Embedded URLs (7 total):

Raw Manifest

Detections

Manifest Findings