Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Fortnite Galaxy Scout Live Wallpaper [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Fortnite brand impersonation by unverified developer (haberikra.com ≠ Epic Games).
• NewTab override + search permission = high-reach search monetization surface on every tab.
• Uninstall and install URL hijacks redirect to gameograf.com tracking URLs.
• No developer name provided; extension title uses a famous game brand.

Evidence

• brand_impersonation store brand_mention.is_impersonation=true for 'fortnite'; developer domain haberikra.com is not Epic Games.
• newtab_override manifest chrome_url_overrides.newtab='newtab.html' replaces every new tab for all 95 users.
• uninstall_url_hijack crx setUninstallURL targets https://gameograf.com/?utm_source=gameograf&utm_medium=link&utm_campaign=bg&utm_content=uninstall
• install_url_hijack crx onInstalled opens https://gameograf.com/?utm_source=install&utm_medium=link&utm_campaign=bg&utm_content=install
• no_developer_name store developer_name is empty string; accountability gap alongside brand impersonation.
• dom_xss_sink crx js/popup.js: innerHTML assigned from variable with no CSP guard; DOM-XSS risk.
• verified_publisher store verified_publisher=true but discount capped by monetization-shape (install/uninstall URL hijacks).
• maintenance_stale store months_since_update=14; falls in 12-24mo band (+6.0 maintenance).
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Fortnite Galaxy Scout Live Wallpaper [adware] + malext.io malicious_extension_sentry; score 4.83 -> 7.33 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows querying browser search API; combined with newtab override, enables search monetization.
• host_permissions: https://api.gameograf.com/* low Scoped to developer-controlled API domain; limited blast radius.
• chrome_url_overrides.newtab medium Replaces every new tab — high-reach surface for ad injection and search redirection.

Pillar Scores

Bookkeeping