Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — My Melody Wallpaper [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Uninstall URL hijacked to yowgames.com — classic game-portal shell / monetization pattern.
• Install URL hijacked to yowgames.com — redirects user on install to third-party site.
• Privacy policy is Google's own policy (not scoped to this extension) — admits data collection and 3rd-party sharing.
• NewTab override + search permission controlled by free-webmail dev with no developer name.

Evidence

• uninstall_url_hijack manifest chrome.runtime.setUninstallURL points to https://yowgames.com/uninstall — game-portal shell pattern.
• install_url_hijack manifest onInstalled opens https://yowgames.com/my-melody-wallpaper — third-party redirect on install.
• newtab_override manifest chrome_url_overrides.newtab = index.html; replaces every new tab for all users.
• privacy_policy_generic store Policy is Google's account privacy policy: scope_extension=false, data_collection=true, third_party_sharing=true.
• free_webmail_dev_no_name store Developer email meyrakonmaz@gmail.com; developer_name empty; no business identity.
• external_unknown_host crx owhit.com referenced in JS external hosts alongside major platforms — unrecognized domain.
• verified_publisher store verified_publisher=true but free-webmail identity and newtab monetization pattern limits trust discount.
• game_portal_shell manifest Both install and uninstall URLs route to yowgames.com — consistent game-portal / traffic-monetization shell.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — My Melody Wallpaper [adware] + malext.io malicious_extension_sentry; score 5.49 -> 7.99 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows reading/modifying search queries; medium risk in newtab context.
• chrome_url_overrides.newtab high Replaces every new tab with extension-controlled page; high monetization/redirect risk.

Pillar Scores

Bookkeeping