Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeRoValra - Roblox Improved
Findings · 3
+3 more findings locked
HIGH FINDINGS · 3
  1. 01Extension silently initiates Roblox OAuth authorization and transmits the resulting access token to apis.rovalra.com without explicit user consent prompt
  2. 02On every roblox.com page where other users appear (profiles, friend lists, leaderboards, trade pages), the extension collects those users' Roblox user IDs and sends them in batches of up to 50 to https://apis.rovalra.com/v1/users/settings, giving the vendor a running record of which accounts the local user has viewed.
  3. 03Extension silently transmits Roblox server IDs to apis.rovalra.com on every game server list page visit
+3 more findings locked
OTHER EXTENSIONS

Is RoValra - Roblox Improved safe?

High risk

No summary available.

Valrav2.4.15Chrome Web Store
75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+3 more findings not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026njcickgebhnpgmoodjdgohkclfplejli

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact