Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — 青柠起始页 [browser-hijack] + malext.io malicious_extension_sentry (+2.5, capped).
• browsingData permission allows clearing user cookies, history, and cache across all sites.
• New-tab and homepage override redirect all new sessions to limestart.cn; persistent monetization surface.
• Privacy policy (docs.retiehe.com) does not scope to this extension and does not confirm data collection practices.
• No developer name listed; verified publisher but identity partially opaque.

Evidence

• browsingData permission manifest HIGH-risk permission: can delete browsing history, cookies, cache for all sites.
• newtab + homepage override manifest chrome_url_overrides.newtab and chrome_settings_overrides.homepage both redirect to limestart.cn.
• privacy policy not scoped api scope_extension=false, data_collection=false: policy on docs.retiehe.com does not address this extension.
• third_party_silence api Privacy policy silent on third-party sharing; +1.0 privacy penalty applies.
• external JS host: dunight.cn crx JS loaded from dunight.cn — a CN domain outside the primary limestart.cn cluster; purpose unclear.
• verified publisher store retinbox.com resolves, not throwaway, domain age 1836 days; verified publisher credit applied.
• no developer name store developer_name is empty; +1.0 reputation penalty for absent identity.
• code quality clean crx code_findings_raw empty, obfuscation_score=0.0, no CVEs; code pillar = 0.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — 青柠起始页 [browser-hijack] + malext.io malicious_extension_sentry; score 4.19 -> 6.69 (+2.5 cap 2.5).

Permissions Breakdown

• activeTab low Access to current tab on user action only; limited scope.
• browsingData high Can clear cookies, history, cache — high-impact data deletion capability.
• commands low Keyboard shortcut registration; minimal risk.
• storage low Local extension storage; no cross-origin exposure.
• chrome_url_overrides.newtab medium Replaces new-tab page; persistent reach over every new tab opened.
• chrome_settings_overrides.homepage medium Overrides browser homepage to limestart.cn; redirect monetization surface.

Pillar Scores

Bookkeeping