Is Best Snake safe?
Best Snake fetches HTML from its own server on each popup open and renders it unsanitized in the popup.
The Best Snake game popup sends a randomly generated client ID, stored in local storage, to mines.cloudapi.stream and inserts the returned markup into the popup page via innerHTML. The content is controlled by the server and is not disclosed in the manifest. The extension has no content scripts or host permissions, so the effect is limited to the popup.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itYanaProject - 19 other listings from the same operator, none carrying a finding
YanaProject - 19 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
19 other listings published from this account, 3k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Best Snake contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- mines.cloudapi.stream
Best Snake sends data to mines.cloudapi.stream. 13 other extensions we have analysed send data here.