Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Белый VPN – чистый proxy с лёгким интерфейсом [browser-hijack] + malext.io malicious_extension_sentry (+2.5, capped).
• proxy permission allows full traffic interception/redirection through developer-controlled server sverchvpn.space
• Privacy policy is Google's generic account policy — not scoped to this extension; admits data collection and 3rd-party sharing
• Developer uses free Gmail with no name; free-webmail + no dev name pattern raises accountability concern
• install_url_hijack=true: extension opens a 3rd-party URL on install, classic monetization/tracking signal

Evidence

• proxy_permission manifest proxy declared — can intercept and reroute all browser TCP connections through sverchvpn.space.
• install_url_hijack store install_url_hijack=true; extension opens external URL on install — monetization/tracking signal.
• js_external_host crx External host sverchvpn.space referenced in JS; RU-hosted, unknown registrant, no CSP to constrain it.
• privacy_policy_generic store PP is Google account policy (479KB); scope_extension=false, data_collection=true, third_party_sharing=true — v3.5(D) → +10.
• free_webmail_no_devname store Developer email vale99505@gmail.com, developer_name empty; no business identity verifiable.
• small_install_high_perm api Only 12 installs with HIGH-tier proxy permission; install_perm_anomaly.small_install_high_perm=true.
• no_csp manifest csp_present=false on MV3; no content_security_policy defined despite external JS host.
• unverified_publisher store verified_publisher=false, is_featured_by_google=false; no accountability signals present.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Белый VPN – чистый proxy с лёгким интерфейсом [browser-hijack] + malext.io malicious_extension_sentry; score 5.35 -> 7.85 (+2.5 cap 2.5).

Permissions Breakdown

• proxy high Can redirect all browser traffic through attacker-controlled server; highest-impact single permission.

Pillar Scores

Bookkeeping