Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Tanjiro Kamado Live Wallpaper New Tab [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• NewTab override hijacks every new tab page for a fan-art wallpaper — high-reach monetization surface.
• Uninstall URL hijack routes users to gameograf.com on removal — tracking/redirect signal.
• Install URL hijack opens gameograf.com on install — unsolicited navigation.
• No developer name listed; verified publisher but anonymous-facing identity.

Evidence

• newtab_override manifest chrome_url_overrides.newtab set to newtab.html — replaces every new tab for all users.
• uninstall_url_hijack crx setUninstallURL targets https://gameograf.com/?utm_source=gameograf&utm_medium=link&utm_campaign=bg&utm_content=uninstall
• install_url_hijack crx onInstalled opens https://gameograf.com/?utm_source=install&utm_medium=link&utm_campaign=bg&utm_content=install
• dom_sink_innerhtml_userctrl crx innerHTML assigned from variable in js/popup.js and js/calendar.js; no CSP; DOM-XSS risk.
• no_csp manifest content_security_policy is null for MV3 extension; default MV3 CSP applies but no explicit restriction.
• verified_publisher store Developer has verified publisher badge; gameograf.com resolves and is not throwaway.
• new_tab_monetization_pattern store NewTab + install/uninstall URL hijack + search permission = fan-shell monetization pattern.
• privacy_policy api Policy scoped, discloses data collection, retention, and third-party sharing — adequate.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Tanjiro Kamado Live Wallpaper New Tab [adware] + malext.io malicious_extension_sentry; score 4.08 -> 6.58 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows reading and potentially influencing search queries; elevated in NewTab context.
• host_permissions: https://api.gameograf.com/* low Scoped to developer's own API domain; limited blast radius.
• chrome_url_overrides.newtab medium Replaces every new tab; high-reach surface for monetization or tracking.

Pillar Scores

Bookkeeping