Top Risks

• Fan-content shell: uses 'God of War' IP without authorization (fan-content pattern +1.5)
• Install/Uninstall URL hijack detected (chrome.runtime.setUninstallURL + onInstalled redirect)
• Generic Google privacy policy admits data collection and 3rd-party sharing without extension scope
• Gmail developer with no business website and low install base (<1K) requesting NewTab override

Evidence

• permissions manifest Permissions: search. Overrides: newtab.html
• reputation store Gmail dev (waqaspk998@gmail.com), no business site, installs=989
• webstore_signals crx Uninstall URL hijack: true. Install URL hijack: true.
• privacy_policy api Generic Google policy; scope_extension=false, data_collection=true, third_party_sharing=true
• network crx 8 external hosts including pixatab.xyz, tabplugins.com; 3 countries
• maintenance store Last updated 17 months ago (May 2025)
• code_quality crx No code findings; obfuscation_score=0.0
• category_mismatch store NewTab override with game-branded wallpaper suggests fan-content monetization shell

Permissions Breakdown

• search medium Search API access; combined with newtab override enables search hijacking patterns
• chrome_url_overrides.newtab medium Overrides new tab page; common monetization shell vector via ad injection

Pillar Scores

Bookkeeping