Top Risks

• proxy permission routes all browser traffic through sverchvpn.space (RU-hosted), a domain not associated with a verified provider.
• Privacy policy is Google's own account policy — completely unscoped to this extension; admits data collection and 3rd-party sharing.
• Developer is anonymous (no name, free Gmail, no business domain); free-webmail + no dev name floor applies.
• install_url_hijack: extension opens a 3rd-party URL on install — possible redirect/affiliate abuse.
• 31 installs with a HIGH-tier permission (proxy) and 1-star rating — tail-attack-surface / low-trust signal.

Evidence

• proxy_permission manifest proxy declared — full browser traffic can be tunnelled to sverchvpn.space (RU).
• install_url_hijack store install_url_hijack=true; extension opens external URL on install — potential affiliate/redirect abuse.
• js_external_hosts crx External JS host: sverchvpn.space (country: RU). No verified business identity behind this domain.
• generic_privacy_policy store Privacy URL is Google's account policy; scope_extension=false, data_collection=true, third_party_sharing=true.
• anonymous_developer store No developer name; email is free Gmail (namikkm13@gmail.com); no business website.
• low_rating store Rating 1/5 with only 1 review and 31 installs — no established trust.
• small_install_high_perm api install_perm_anomaly: small_install_high_perm=true; 31 installs + proxy = tail attack surface.
• no_csp manifest content_security_policy is null (csp_present=false); MV3 default CSP applies but no explicit policy declared.

Permissions Breakdown

• proxy high Allows routing all browser traffic through an attacker-controlled server; critical for a VPN extension.

Pillar Scores

Bookkeeping