Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — VI Arcane Live Wallpaper [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• NewTab override hijacks every new tab to gameograf.com ad-tracking URL (install + uninstall URL hijack confirmed).
• Privacy policy is Google's own generic policy — not scoped to this extension, admits data collection and 3rd-party sharing.
• JS contacts social/streaming giants (instagram, netflix, youtube, x.com) with no stated functional reason.
• No developer name listed; verified publisher status doesn't explain gameograf.com monetization redirect.

Evidence

• install_url_hijack manifest onInstalled opens https://gameograf.com/?utm_source=ovkas — clear third-party monetization redirect.
• uninstall_url_hijack manifest setUninstallURL points to https://gameograf.com/?utm_source=ovkas — same ad-tech domain.
• newtab_override manifest chrome_url_overrides.newtab = index.html; every new tab replaced, combined with search permission.
• privacy_policy_generic store Policy URL is myaccount.google.com/privacypolicy — Google's own policy, not scoped to this extension.
• privacy_policy_classification api scope_extension=false, data_collection=true, third_party_sharing=true — v3.5(D) worst-case: +10.0.
• js_external_hosts crx 6 external hosts: gameograf.com, google.com, instagram.com, netflix.com, youtube.com, x.com.
• no_csp manifest content_security_policy is null; no CSP protection despite external JS host contacts.
• verified_publisher_with_monetization store Verified publisher but extension contacts gameograf.com ad-tech; v3.5(E) caps discount at -1.0.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — VI Arcane Live Wallpaper [adware] + malext.io malicious_extension_sentry; score 5.47 -> 7.97 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Can manipulate search behavior; relevant given newtab override and gameograf.com redirect.
• chrome_url_overrides.newtab high Overrides every new tab page — prime surface for monetization and traffic hijacking.

Pillar Scores

Bookkeeping