Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Atlas Mens Chain Length G [adware] [divergent] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy discloses third-party data sharing without scoping retention — inadequate for enterprise.
• Developer name field is blank; 'Offered by' identity unconfirmed beyond email domain.
• Only 3 installs — essentially untested in the wild; no community signal on behaviour.
• No declared permissions or host access — extremely narrow surface, but very early lifecycle.

Evidence

• verified_publisher store Extension carries verified-publisher badge; email domain atlasmens.com resolves and is not throwaway.
• permissions_empty manifest No permissions, host_permissions, or content_scripts declared — lowest possible capability surface.
• privacy_policy_third_party_sharing api Policy fetched; scope_extension=true, data_collection=true, retention=false, third_party_sharing=true.
• no_code_findings crx 1 JS file scanned; obfuscation_score=0.0; code_findings_raw empty; no external JS hosts.
• low_install_count store Only 3 installs — brand-new extension with no user validation signal.
• no_bad_hosts api threat_intel: bad_host_hits=[], monetization_hits=[], affiliate_hits=[], no ad-tech detected.
• recently_updated store Last updated June 23 2026; months_since_update=2 — active maintenance, no staleness penalty.
• developer_name_missing store developer_name field is empty string; identity rests solely on email and verified-publisher badge.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Atlas Mens Chain Length G [adware] [divergent] + malext.io malicious_extension_sentry; score 0.73 -> 3.23 (+2.5 cap 2.5).

Pillar Scores

Bookkeeping