Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Satoru Gojo from JJK Live Wallpaper [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Uninstall URL hijack redirects to gameograf.com with UTM tracking — monetization shell pattern.
• Install URL hijack also redirects to gameograf.com — aggressive traffic monetization on install.
• Privacy policy is Google's own policy (not scoped to this extension) admitting data collection and third-party sharing.
• NewTab override + search permission combination enables persistent search/traffic monetization.

Evidence

• uninstall_url_hijack manifest setUninstallURL → gameograf.com with UTM campaign tags; classic monetization-shell redirect.
• install_url_hijack manifest onInstalled opens gameograf.com with UTM tags; aggressive traffic harvesting on install.
• newtab_override manifest chrome_url_overrides.newtab = index.html; every new tab is captured by this extension.
• privacy_policy_generic store Policy URL is Google's own account policy; scope_extension=false, data_collection=true, third_party_sharing=true.
• developer_identity store Developer email is free-webmail (gmail), no verified publisher, no business website.
• js_external_hosts crx Extension references gameograf.com plus major platforms (google, instagram, netflix, youtube, x.com).
• search_permission_newtab_combo manifest 'search' permission + newtab override enables default search engine override and traffic monetization.
• cve_findings crx No CVEs detected; jquery 3.7.1 is current and unvulnerable.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Satoru Gojo from JJK Live Wallpaper [adware] + malext.io malicious_extension_sentry; score 5.44 -> 7.94 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows modifying default search provider; medium risk for a NewTab override extension.
• chrome_url_overrides.newtab medium Replaces every new tab with extension page; primary monetization surface.

Pillar Scores

Bookkeeping