Top Risks

• Uninstall URL hijack redirects to yowgames.com with UTM tracking — traffic monetization on exit.
• Install URL hijack opens yowgames.com on install — monetization-shell pattern confirmed.
• Privacy policy fetched but not scoped to this extension; admits data collection and third-party sharing.
• Free-webmail developer (gmail) with no verified publisher status and no business identity verification.
• Content scripts injected on all URLs (*://*/*) despite benign stated function.

Evidence

• uninstall_url_hijack crx chrome.runtime.setUninstallURL() targets https://yowgames.com/...?utm_source=Uninstall — classic traffic monetization.
• install_url_hijack crx onInstalled opens https://yowgames.com/...?utm_source=install — monetization shell pattern.
• privacy_policy_not_scoped api Policy fetched from yowgames.com; scope_extension=false, data_collection=true, third_party_sharing=true.
• free_webmail_developer store Developer email gunaysimge48@gmail.com; no verified publisher badge; no confirmed business domain.
• content_scripts_all_urls manifest content_scripts_matches=[*://*/*] runs on every page; no host_permissions declared separately.
• js_external_hosts crx External JS reference to yowgames.com detected in extension files.
• no_csp manifest content_security_policy is null; MV3 strict default applies but no explicit CSP hardening.
• low_install_count store Only 113 installs with 0 ratings — minimal social proof; difficult to assess real-world impact.

Permissions Breakdown

• storage low Stores extension preferences locally; minimal risk on its own.
• content_scripts *://*/* medium Injects scripts on every page visited; broad reach even without explicit host_permissions.

Pillar Scores

Bookkeeping