Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Boruto Uzumaki Awakened Byakugan Power [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy links to generic Google policy, not specific to extension data practices.
• New Tab override combined with 'search' permission creates monetization/hijack risk.
• Both install and uninstall URLs redirect to developer's site, a known monetization pattern.
• Extension is part of a larger operator cluster (2 direct siblings, 31+ by email).

Evidence

• permissions manifest Declared permissions: 'search', 'chrome_url_overrides.newtab'.
• privacy_policy_classification api Privacy policy is generic (Google), not scoped to extension (scope_extension:false).
• webstore_signals store install_url_hijack:true, uninstall_url_hijack:true, operator_cluster.sibling_count:2
• code_quality crx Found 2 instances of dom_sink_innerhtml_userctrl (DOM-XSS) in popup.js, calendar.js.
• network_behavior crx MV3 extension with no Content Security Policy (CSP) defined.
• reputation store Verified publisher, but no developer name provided.
• maintenance store Last updated 14 months ago (September 11, 2025).
• host_permissions manifest Host access limited to https://api.gameograf.com/*.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Boruto Uzumaki Awakened Byakugan Power [adware] + malext.io malicious_extension_sentry; score 6.48 -> 8.98 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows control over search settings; potential for search hijacking.
• chrome_url_overrides.newtab medium Overrides New Tab page; potential for monetization or content injection.

Pillar Scores

Operator Siblings (2)

Other extensions sharing this developer's compound fingerprint:

• fepngjellfjifehcbefcfdhjmjaanbdc
• inofddlmllkdhdgchfekpjhnoondaenl

Bookkeeping