Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Harry Styles Wallpapers [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• NewTab override with search provider override — classic monetization shell for ad-revenue via search hijack.
• Uninstall and install URL hijacks route users to gameograf.com tracking links.
• bit.ly affiliate/cloaking shortlink present in external JS hosts — obfuscates redirect destination.
• mlionltd.github.io external JS host is a non-dev-controlled third-party CDN with no auditability.

Evidence

• newtab_override manifest chrome_url_overrides.newtab → index.html; replaces every new-tab with branded wallpaper+search UI.
• uninstall_url_hijack crx setUninstallURL to https://gameograf.com/?utm_source=uninstall — monetization tracking on removal.
• install_url_hijack crx onInstalled opens https://gameograf.com/?utm_source=install — monetization tracking on install.
• affiliate_hit_bitly crx bit.ly listed in js_external_hosts — affiliate/cloaking redirector per threat_intel.affiliate_hits.
• external_uncontrolled_host crx mlionltd.github.io in js_external_hosts — third-party GitHub Pages host outside dev control.
• dom_xss_sink crx dom_sink_innerhtml_userctrl in js/popup.js; no CSP present — elevated XSS risk.
• maintenance_stale store 16 months since last update — falls in 12-24mo band (+6.0 maintenance score).
• no_developer_name store developer_name is empty string; reduces accountability for newtab monetization shell.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Harry Styles Wallpapers [adware] + malext.io malicious_extension_sentry; score 4.28 -> 6.78 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows overriding search provider — paired with newtab override is a monetization signal.
• host_permissions: https://api.gameograf.com/* low Scoped to own API domain; limited blast radius.
• chrome_url_overrides.newtab medium Replaces new-tab page; primary attack surface for this extension class.

Pillar Scores

Bookkeeping