Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Nissan GTR live wallpaper [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Uninstall AND install URL both hijack to gameograf.com — classic traffic-monetization shell pattern.
• Privacy policy is Google's own policy (not scoped to this extension) yet data_collection+third_party_sharing both true — admits unconstrained data sharing.
• NewTab override with 'search' permission and external JS calls to social/media giants — search-monetization aggregator shape.
• No CSP (MV3 default only); extension contacts 6 external JS hosts including gameograf.com.

Evidence

• install+uninstall URL hijack to gameograf.com manifest Both onInstalled and uninstall redirect to gameograf.com with UTM tags — confirmed traffic-monetization pattern.
• privacy policy is Google's generic policy store policy URL=myaccount.google.com/privacypolicy; scope_extension=false, data_collection=true, third_party_sharing=true → D rule +10.
• NewTab override + search permission manifest chrome_url_overrides.newtab=index.html and permissions=[search]; primary monetization surface.
• 6 external JS hosts crx gameograf.com, google.com, instagram.com, netflix.com, youtube.com, x.com — JS loaded from 6 cross-origin domains.
• no CSP declared manifest content_security_policy is null; csp_present=false. MV3 default applies but no explicit restriction.
• unverified publisher, no Google feature badge store verified_publisher=false, is_featured_by_google=false; reputation starts at 5.0.
• game-portal shell pattern store gameograf.com is a game-portal domain used as redirect target for install/uninstall — +2.0 webstore penalty.
• no CVE findings crx cve_findings_raw=[]; jquery 3.7.1 has no flagged CVEs. CVE pillar=0.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Nissan GTR live wallpaper [adware] + malext.io malicious_extension_sentry; score 5.34 -> 7.84 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows overriding or querying the browser search; combined with newtab override this is a monetization vector.
• chrome_url_overrides.newtab medium Replaces the new tab page; primary surface for ad/search monetization in this extension.

Pillar Scores

Bookkeeping