UltraWide Streaming: custom ratios [QVI]
ofkcbakkpjefjndcmbkokadbmmaimnlp
Risk Score
4.92
Risk Level:
Medium
Recommendation:
🟡 MEDIUM RISK — review
Top Risks
- THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — UltraWide Streaming: custom fullscreen ratios [QVI] + malext.io malicious_extension_sentry (+2.5, capped).
- Free-webmail developer email (primepartyapp@gmail.com); no verified publisher; low accountability.
- Content scripts injected across 14 major streaming platforms; broad reach if extension is ever compromised.
- js_external_hosts includes me3x.online — unknown domain with no clear stated purpose.
- Privacy policy discloses third-party data sharing; extension-scoped but sharing partners not named.
Evidence
- free_webmail_dev store Developer email primepartyapp@gmail.com is free webmail; no verified publisher badge.
- is_featured_by_google store Extension carries Google Featured badge, reducing reputation risk.
- host_permissions_streaming_scoped manifest 14 streaming-platform host permissions align with ultrawide ratio adjustment use case.
- external_host_me3x_online crx js_external_hosts includes me3x.online — unrecognized domain; other hosts are known reference sites.
- privacy_policy_third_party_sharing api Privacy policy fetched, scoped to extension, discloses data collection and third-party sharing with retention.
- no_cve_findings crx cve_findings_raw is empty; no vulnerable bundled libraries detected.
- no_code_findings crx code_findings_raw empty, obfuscation_score 0.0; 26 JS files scanned with no malicious signals.
- recently_updated store Last updated July 16, 2026 (1 month ago); active maintenance.
- threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — UltraWide Streaming: custom fullscreen ratios [QVI] + malext.io malicious_extension_sentry; score 2.42 -> 4.92 (+2.5 cap 2.5).
Permissions Breakdown
- alarms low Schedules periodic tasks; no data access risk on its own.
- storage low Stores user preferences locally; low sensitivity.
- host_permissions: *://*.netflix.com/* + 13 others (major streaming domains) medium Content script access to 14 major streaming sites; scoped to stated function (video ratio adjustment).
Pillar Scores
Permissions3.30
Reputation5.50
Network0.00
Webstore1.00
Maintenance0.00
Privacy1.00
Code Quality0.00
CVE Exposure0.00
Bookkeeping
Rubric v3.6
Scored at 2026-11-03 09:52
Listing SHA
693497eeff32…
Force block
— not fired
Score recovered
no
Elapsed
—