Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Satoru Gojo Live Wallpaper [adware] (+2.0, capped).
• NewTab override with uninstall+install URL hijack signals monetization shell pattern.
• No developer name listed; no verified publisher badge; accountability gap.
• Privacy policy admits third-party data sharing without scoping to this extension.
• last_updated missing — maintenance unknown, possible stale/abandoned extension.

Evidence

• newtab_override manifest chrome_url_overrides.newtab set; hijacks every new tab — primary monetization surface for fan-content shells.
• uninstall_url_hijack crx uninstall_url_hijack=true; classic monetization/tracking signal even without confirmed target URL.
• install_url_hijack crx install_url_hijack=true; opens 3rd-party URL on install — +2.0 Webstore.
• no_developer_name store developer_name is empty; no verified publisher badge; reduced accountability.
• fan_content_shell store Anime fan-theme NewTab with search permission matches fan-content/theme shell monetization pattern.
• privacy_third_party_sharing api Privacy policy fetched: scope_extension=true, data_collection=true, third_party_sharing=true, retention=false.
• external_js_hosts_broad crx JS references chatgpt.com, instagram.com, youtube.com, x.com — broad beyond fan-theme stated function.
• last_updated_missing store months_since_update=null; cannot confirm freshness; scored conservatively at 6-12mo band.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Satoru Gojo Live Wallpaper [adware]; score 5.36 -> 7.36 (+2.0 cap 2.5).

Permissions Breakdown

• search medium Allows reading/interacting with search; combined with NewTab override enables search monetization.
• chrome_url_overrides.newtab high Replaces every new tab; high reach, primary monetization surface for fan-theme shells.

Pillar Scores

Bookkeeping