Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — BMW i7 Neon Red Live Wallpaper + AI Extensions New Tab [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• NewTab override with uninstall/install URL hijack to gameograf.com — monetization shell pattern.
• Privacy policy URL returns connection error (fetch_error) — effectively no policy accessible.
• Two innerHTML DOM-XSS sinks with no CSP — elevated XSS risk on new tab page.
• No developer name listed; verified publisher badge provides limited assurance given MV3 + no CSP.

Evidence

• uninstall_url_hijack manifest chrome.runtime.setUninstallURL targets https://gameograf.com/?utm_source=extension&utm_medium=install
• install_url_hijack manifest onInstalled opens https://gameograf.com/?utm_source=extension&utm_medium=install
• newtab_override manifest chrome_url_overrides.newtab = newtab.html — replaces every new tab.
• privacy_policy_fetch_error api privacy_policy_classification.fetched == false; reason: fetch_error:ConnectionError — policy inaccessible.
• dom_xss_sink_no_csp crx Two innerHTML sinks (popup.js, calendar.js) with csp_present == false — XSS risk elevated.
• no_developer_name store developer_name is empty string; Offered By field absent.
• verified_publisher store verified_publisher == true; partial trust discount applied.
• newtab_monetization_pattern store NewTab + install/uninstall URL hijack + UTM params = monetization shell fingerprint.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — BMW i7 Neon Red Live Wallpaper + AI Extensions New Tab [adware] + malext.io malicious_extension_sentry; score 4.93 -> 7.43 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Search API access; paired with NewTab override enables search provider manipulation.
• chrome_url_overrides.newtab medium Replaces new tab page — primary monetization surface for this extension type.
• host_permissions: https://api.gameograf.com/* low Scoped to dev-controlled domain only; no broad host access.

Pillar Scores

Bookkeeping