Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Jujutsu Kaisen Live Wallpaper [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Uninstall URL hijack routes to gameograf.com ad/tracking URL — clear monetization shell behavior.
• Install URL hijack opens gameograf.com on install — aggressive user tracking at onboarding.
• New-tab override combined with search permission enables search-provider monetization.
• Privacy policy is Google's own policy — not scoped to this extension; admits data collection and third-party sharing.

Evidence

• uninstall_url_hijack crx setUninstallURL targets gameograf.com with UTM params — third-party monetization on uninstall.
• install_url_hijack crx onInstalled opens gameograf.com with UTM params — affiliate/tracking redirect on install.
• newtab_override manifest chrome_url_overrides.newtab set to index.html; NewTab override with monetization shape.
• privacy_policy_generic store Policy URL is Google's own privacy policy; scope_extension=false, data_collection=true, third_party_sharing=true.
• external_host_scope_mismatch crx JS contacts instagram.com, netflix.com, youtube.com, x.com — unrelated to a live-wallpaper function.
• no_csp manifest content_security_policy is null; MV3 strict default applies but no explicit CSP declared.
• search_permission manifest search permission declared alongside newtab override — enables search-provider monetization.
• gameograf_domain crx gameograf.com appears in both install/uninstall hijack targets and js_external_hosts — central monetization hub.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Jujutsu Kaisen Live Wallpaper [adware] + malext.io malicious_extension_sentry; score 4.78 -> 7.28 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows overriding search behavior; medium risk on its own but paired with newtab override escalates.
• chrome_url_overrides.newtab medium Replaces new-tab page; primary monetization vector for this category of extension.

Pillar Scores

Bookkeeping