Is Prodigy Hacking Extension | X Loader safe?

Medium risk

Prodigy Hacking Extension | X Loader fetches and runs remote Prodigy hack code on Prodigy game pages.

When a Prodigy game page loads, the extension downloads a game-file patch and cheat-menu bundle from GitHub Raw or from URLs saved in extension storage. It injects the downloaded JavaScript into the page through an onreset handler and removes CSP and X-Frame-Options headers on Prodigy pages while it runs.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on prodigygame.com

    *://*.prodigygame.com/*

  • Read and change your data on raw.githubusercontent.com

    *://raw.githubusercontent.com/*

  • Store data in your browser

    storage

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • See which of your requests its blocking rules matched

    declarativeNetRequestFeedback

Where it sends data

Destinations our analysis observed Prodigy Hacking Extension | X Loader contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • raw.githubusercontent.comwidely used

    Prodigy Hacking Extension | X Loader sends data to raw.githubusercontent.com. A widely used service: 26 other extensions we have analysed send data here.

Updated 21 September 2026cpgbmddnjccigbbhcjokhedjclaegggb