Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — myTensai Search Provider [browser-hijack] + malext.io malicious_extension_sentry (+2.5, capped).
• Search-provider override silently replaces default browser search engine with mytensai.com.
• Privacy policy is only 550 chars, not scoped to this extension, no data collection or retention disclosure.
• 17 months since last update — stale but not yet critical; no CVEs detected.
• Unverified publisher; small developer (Zeus Media srl) with limited accountability signals.

Evidence

• search_provider_override manifest chrome_settings_overrides.search_provider with is_default=true redirects all queries to mytensai.com/mth/t.php.
• privacy_policy_inadequate api Policy fetched (550 chars); scope_extension=false, data_collection=false, retention=false — generic, not extension-scoped.
• third_party_silence api Privacy policy silent on third-party sharing; +1.0 privacy penalty applied.
• stale_extension store 17 months since last update; maintenance score 6.0 (12–24mo band).
• unverified_publisher store verified_publisher=false, is_featured_by_google=false; no discount applied.
• low_installs store Only 177 installs; no install-count amplifier triggered.
• no_js_files crx js_file_count=0, code_findings_raw empty, obfuscation_score=0.0 — manifest-only extension.
• no_cve_findings api cve_findings_raw empty; CVE pillar=0.0.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — myTensai Search Provider [browser-hijack] + malext.io malicious_extension_sentry; score 3.61 -> 6.11 (+2.5 cap 2.5).

Permissions Breakdown

• chrome_settings_overrides.search_provider (is_default=true) medium Replaces browser default search engine silently; medium-tier capability per rubric rule (a).

Pillar Scores

Bookkeeping