Chrome Web StoreCaution required
Suspicious in code review (v0.8)
Our reviewer found behaviour consistent with malware in version 0.8, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
62 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
3D Wallpapers is rated caution by Extension Auditor. Our code review reported 4 findings (2 high, 2 medium), led by other. It comes from a publisher with 6 extensions and was last updated in July 2024.
Key findings
- High
Other
The 'yahoo' case is set as the default (selectedSearchEngine = 'yahoo') but is actually routed to [domain withheld] with a hardcoded affiliate ID (gd=SY1003609, searchsource=69). This is an undisclosed affiliate search monetization scheme masquerading as a Yahoo search option. The CWS description claims the extension provides Google search results, but all searches default to this third-party affiliate aggregator, which is unrelated to the extension's stated wallpaper purpose and not disclosed in any privacy policy category.
- High
Other
This content script targets Google's search results page (using Google-specific CSS selectors.FPdoLc and.gNO89b for the submit button) and places invisible absolutely-positioned overlays (z-index: 999999999999999) directly over Google's search buttons. When a user types a query and presses Enter or clicks what appears to be Google's search button, their query is silently hijacked to [domain withheld] instead. This constitutes clickjacking of a major search engine to redirect queries to an undisclosed affiliate search service. Although this file is not declared in the bundled (no content_scripts key), its presence in the extension bundle indicates prior active deployment or a staged rollout that has not yet been enabled in this version.
- Medium
Other
The HTML form's fallback action attribute points to [domain withheld], a third-party search affiliate domain not disclosed in the privacy policy and unrelated to the extension's stated purpose. If JavaScript is unavailable or the submit handler fails, search queries would be submitted directly to this undisclosed third-party. This provides a secondary undisclosed search monetization channel.
- Medium
Other
The bundled manifest declares manifest_version 2 and author 'Frooty Studios', while the live CWS listing shows manifest_version 3 and attributes the extension to 'Triplex Media'. The author name discrepancy strongly suggests the extension was transferred or rebranded after initial submission, a pattern associated with extension acquisition for monetization abuse. The manifest version mismatch may indicate the CWS listing was updated without the corresponding ZIP being replaced.
Analyst notes
The extension actively routes all default searches through affiliate monetization domains ([domain withheld] with hardcoded affiliate ID gd=SY1003609 in:42, and [domain withheld] as the HTML form fallback in:87) while the CWS listing falsely claims it 'provides the best search results by changing your search engine to Google.' Additionally, contains fully implemented code to overlay invisible divs on top of Google's own search submit buttons to silently redirect Google searches to [domain withheld] — this code is present in the bundle but not declared in the manifest, indicating either a prior-version deployment or a staged rollout. Publisher has a 25% malicious extension rate ( other extensions), the bundled manifest names author 'Frooty Studios' while CWS lists 'Triplex Media' and declares MV3, and no data collection is disclosed despite routing user search queries to undisclosed third-party affiliate domains. The third-party risk score (low impact, medium likelihood) and our ML score (0.32) both weakly corroborate; the actual source code is far more damning than the scores suggest.
3D Wallpapers Chrome extension security report
ID: fofbadhopmpnmfbkpmkifnkiahoddapp
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Triplex Media
- Privacy
- Privacy Policy
- MX records exist
- No
- Domain exists
- No
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- No
- Website
- Visit
Screenshots & videos
Install growth
This extension requests no permissions and has no recorded risk factors.
62 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
3D Wallpapers.
Read the publisher’s full description
Download our really cool 3D New Tab Wallpaper extension, created specifically for fans of cool 3D Wallpapers Just open a new tab and each new tab will - Show beautiful 3D new tab home screen wallpapers - Providing the best search results by changing your search engine on the new tab to Google - Easy view time of day By clicking "Add to chrome", I accept and agree to installing the 3D Wallpapers Chrome extension and setting Chrome™ New Tab to that provided by the service and the Privacy(https://triplex.media/privacy_policy.html) and Terms of Use(https://triplex.media/terms.html). Triplex Media, 1/60 Park St, Sydney NSW 2000 info@triplex.media
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
62 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Triplex Media
- Tropics Wallpapers27,522 users
- Dogs & Puppies Wallpapers3,000 users
- Office Tools2,000 users
- PDF Converter1,000 users
- Search1011 users
Popular in Tools
- 迅雷下载支持85,000,000 users
- Zotero Connector9,000,000 users
- ChatGPT8,000,000 users
- Browsec VPN - Free VPN for Chrome8,000,000 users
- WPS PDF - Read, Edit, Fill, Convert, and AI Chat PDF with Ease7,000,000 users
Store rankings
Where this extension appears in store category, collection and keyword rankings.