Is "Bridge the Snake" on Chrome Web Store Safe to Install?

[email protected] · chrome · v0.1.3

Bridge the Snake is a level-based puzzle game where you guide a snake across a river by stepping on scattered stones. To advance to next level, you must collect all the apples and reach the exit on the right. The key strategy: eat apples to grow longer, then use your extended body to reach apples placed in hard-to-reach spots over the river. How to Play? • Use arrow keys to control the snake. • Stay on floating stones to cross the river safely. • Collect all apples to unlock the exit. • Each apple extends the snake’s length. • Falling into the water ends the level. Game Features: • 10 progressively challenging levels. • "Retry" to replay the current level or "Restart" from Level 1. • Strategic movement and planning required to avoid falling. Tips for Success: • Always keep part of the snake on a stone. • Some apples are tricky — plan your path carefully. • You may need to cross back and forth to succeed. Can you beat all 10 levels and master the river?

Risk Assessment

Analyzed
61.18
out of 100
MEDIUM

23 security findings detected across all analyzers

Chrome extension requesting 1 permission

Severity Breakdown

0
Critical
0
High
16
Medium
7
Low
0
Info

Finding Categories

2
Network
14
IoC Indicators

YARA Rules Matched

5 rules(7 hits)
LocalStorageShouldNotBeUsed postinstall file download postinstall crypto operations postinstall network communication postinstall obfuscation

Requested Permissions

1 permission
storage
Low

About This Extension

Bridge the Snake is a level-based puzzle game where you guide a snake across a river by stepping on scattered stones. To advance to next level, you must collect all the apples and reach the exit on the right. The key strategy: eat apples to grow longer, then use your extended body to reach apples placed in hard-to-reach spots over the river. How to Play? • Use arrow keys to control the snake. • Stay on floating stones to cross the river safely. • Collect all apples to unlock the exit. • Each apple extends the snake’s length. • Falling into the water ends the level. Game Features: • 10 progressively challenging levels. • "Retry" to replay the current level or "Restart" from Level 1. • Strategic movement and planning required to avoid falling. Tips for Success: • Always keep part of the snake on a stone. • Some apples are tricky — plan your path carefully. • You may need to cross back and forth to succeed. Can you beat all 10 levels and master the river?

Detailed Findings

9 total

YARA Rule Matches

5 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
5
Domains
9
Strings
14

All Indicators · 14

Domain
detected Domain: et.mk

XIOC detected Domain: et.mk

extracted_from_files

Domain
detected Domain: this.ctx.save

XIOC detected Domain: this.ctx.save

extracted_from_files

URL
detected URL: https://www.google-analytics.com/mp/collect';

XIOC detected URL: https://www.google-analytics.com/mp/collect';

extracted_from_files

URL
detected URL: https://www.google-analytics.com/debug/mp/collect';

XIOC detected URL: https://www.google-analytics.com/debug/mp/collect';

extracted_from_files

URL
detected URL: https://developers.google.com/analytics/devguides/collection/protocol/ga4/sending-events?client_type=gtag#recommended_parameters_for_reports

XIOC detected URL: https://developers.google.com/analytics/devguides/collection/protocol/ga4/sending-events?client_type=gtag#recommended_parameters_for_reports

extracted_from_files

URL
detected URL: https://developers.google.com/analytics/devguides/collection/protocol/ga4/reference?client_type=gtag#reserved_names

XIOC detected URL: https://developers.google.com/analytics/devguides/collection/protocol/ga4/reference?client_type=gtag#reserved_names

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Domain
detected Domain: www.google-analytics.com

XIOC detected Domain: www.google-analytics.com

extracted_from_files

Domain
detected Domain: developers.google.com

XIOC detected Domain: developers.google.com

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: this.buttoncontainer.style.gap

XIOC detected Domain: this.buttoncontainer.style.gap

extracted_from_files

Domain
detected Domain: this.buttoncontainer.style.top

XIOC detected Domain: this.buttoncontainer.style.top

extracted_from_files

Domain
detected Domain: map.map

XIOC detected Domain: map.map

extracted_from_files

Domain
detected Domain: leveldata.map

XIOC detected Domain: leveldata.map

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Bridge the Snake is a Chrome Web Store extension published by [email protected]. Version 0.1.3 has been analyzed by the Risky Plugins security platform, receiving a risk score of 61.18/100 (MEDIUM risk) based on 23 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • Medium: 16 finding(s)
  • Low: 7 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Bridge the Snake is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 1K users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions