Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Wanderlustar [browser-hijack] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy is Google's generic policy — not scoped to this extension, admits data collection and third-party sharing (+10 privacy).
• Uninstall URL hijack redirects to wanderlustar.com tracking endpoint (+3.0 webstore).
• NewTab + default search override seizes every user search query through tracked search_url params.
• Extension stale 22 months (>18mo) while overriding newtab and search — verified-publisher discount capped at -1.0 per 0c.

Evidence

• uninstall_url_hijack manifest chrome.runtime.setUninstallURL → https://wanderlustar.com/d.html?ti=2b5482ec...&t=uninstall (+3.0 webstore).
• generic_privacy_policy store Policy URL is Google's own account policy; scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 privacy.
• newtab_and_search_override manifest chrome_url_overrides.newtab + chrome_settings_overrides.search_provider is_default=true with tracking params in search_url.
• stale_extension store 22 months since last update; verified-publisher discount capped at -1.0 per invariant 0c (stale >18mo).
• dom_xss_sink_no_csp crx innerHTML userctrl in www/1.js with csp_present=false → +2.0 code quality per FIX B.
• no_developer_name store developer_name is empty string; +1.0 reputation for missing Offered By identity.
• triple_stale_fingerprint store >18mo stale + no CSP + NewTab monetization pattern → +2.0 webstore triple-stale (v2c adapted).
• new_tab_monetization_shape manifest NewTab override with monetized search URL (source=7023.139 tracking params) → +2.0 webstore.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Wanderlustar [browser-hijack] + malext.io malicious_extension_sentry; score 5.45 -> 7.95 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows search provider override; combined with chrome_settings_overrides is_default=true, seizes default search.
• chrome_url_overrides.newtab medium Replaces every new tab — primary reach mechanism for monetized search injection.
• chrome_settings_overrides.search_provider medium Sets Wanderlustar as default search engine with source/tracking params in search URL.

Pillar Scores

Bookkeeping