Top Risks

• Default search engine override routes all omnibox queries to developer-controlled predatorwallpaper.com.
• uninstall_url_hijack=true: extension fires redirect on uninstall, a known monetization/tracking pattern.
• Privacy policy admits data collection and third-party sharing but is not scoped to this extension (v3.5 D → +10.0 privacy).
• 28 months since last update with search-override active; 0-day compromise or abandonment risk.
• Developer email is free webmail (gmail), no developer name provided, verified/featured badges do not offset monetization concerns.

Evidence

• search_provider_override manifest chrome_settings_overrides.search_provider is_default=true points to predatorwallpaper.com — all queries exfiltrated to dev.
• uninstall_url_hijack crx uninstall_url_hijack=true; standard monetization/tracking signal even without explicit target URL.
• privacy_policy_inadequate api Policy fetched: scope_extension=false, data_collection=true, third_party_sharing=true → v3.5-D +10.0 privacy pillar.
• stale_update store Last updated May 2024; 28 months since update. Triple-stale fingerprint (>24mo) adds +2.0 webstore.
• low_rating store Rating = 1.0; extremely low user satisfaction consistent with unwanted search hijack behaviour.
• free_webmail_developer store Developer email rayt18673@gmail.com; no developer name; numbered-alias-like pattern.
• verified_publisher_cap_applied store months_since_update=28 >18 → invariant 0c caps verified/featured discount to -1.0 total.
• search_provider_monetization manifest +2.0 webstore for search-provider override; category mismatch (not Adblock/VPN) adds further risk.

Permissions Breakdown

• storage low Standard local preference storage; low standalone risk.
• declarativeNetRequest medium Can block/redirect network requests; medium risk depending on ruleset.
• host_permissions: *://predatorwallpaper.com/* low Scoped to developer-owned domain only; low breadth risk.
• chrome_settings_overrides.search_provider (is_default=true) high Hijacks default search engine to dev-controlled endpoint; major UX/privacy risk.

Pillar Scores

Bookkeeping