Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — McLaren 750S Spider Wallpapers New Tab [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy URL unreachable (fetch timeout) — no verifiable data handling disclosure for a NewTab extension.
• Uninstall and install URL hijack both confirmed — extension funnels users to gameograf.com on lifecycle events.
• bit.ly affiliate/cloaking link in js_external_hosts — destination obscured, monetization cloaking risk.
• NewTab override + search permission combo enables search query interception and ad-revenue monetization.

Evidence

• uninstall_url_hijack crx chrome.runtime.setUninstallURL points to gameograf.com with UTM tracking params on uninstall.
• install_url_hijack crx onInstalled opens gameograf.com with UTM tracking params — confirmed install hijack.
• privacy_policy_fetch_failed api privacy_policy_classification.fetched=false (ReadTimeout); policy URL on haberikra.com, not dev domain.
• affiliate_hit_bit.ly crx bit.ly listed in js_external_hosts; threat_intel flags it as affiliate/cloaking redirector.
• newtab_override manifest chrome_url_overrides.newtab=index.html replaces every new tab page.
• search_permission manifest search permission declared alongside NewTab override — enables search query monetization.
• external_host_mlionltd.github.io crx mlionltd.github.io in js_external_hosts — third-party GitHub-hosted resource, unverified.
• months_since_update_15 store Last updated May 2025; 15 months stale — in 6–24mo maintenance band.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — McLaren 750S Spider Wallpapers New Tab [adware] + malext.io malicious_extension_sentry; score 5.48 -> 7.98 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows reading/overriding search queries; paired with NewTab override, enables search monetization.
• chrome_url_overrides.newtab medium Replaces every new tab; primary surface for ad/affiliate monetization and tracking.

Pillar Scores

Bookkeeping