Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Nezuko Kamado Butterfly Kimetsu No Yaiba Live Wallpaper [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy unreachable (SSLError) and is generic Google policy, not scoped to this extension
• Stale maintenance: 14 months since update
• Manifest unavailable (html_fallback) — capability surface unobservable
• Small operator cluster (31 extensions sharing dev email)

Evidence

• manifest_source store html_fallback: no manifest retrieved; permissions and code surface unknown
• privacy_policy_classification api fetched=false (SSLError); generic Google policy URL; scope_extension=false
• months_since_update store 14 months since update (Sep 11, 2025) -> maintenance +6.0
• verified_publisher store Verified publisher badge; reputation floored at 2.0
• operator_cluster api sibling_count=1, dev_email shared across 31 extensions (wallpaper-portal operator)
• code_findings_raw crx No code findings; obfuscation_score=0.0; js_files_scanned=0
• cve_findings_raw crx Empty: no CVEs, no known-bad-host hits
• install_perm_anomaly api 291 installs, no high-tier permissions, no tail-attack surface
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Nezuko Kamado Butterfly Kimetsu No Yaiba Live Wallpaper [adware] + malext.io malicious_extension_sentry; score 2.65 -> 5.15 (+2.5 cap 2.5).

Pillar Scores

Operator Siblings (3)

Other extensions sharing this developer's compound fingerprint:

• hnldojndjkpjepfefcpgnpmpjfbmjjbh
• fepngjellfjifehcbefcfdhjmjaanbdc
• bajfhkcgipciajpkdlkoefampepbmdom

Bookkeeping