Chrome Web StoreCaution required
Suspicious in code review (v3.1.0)
Our reviewer found behaviour consistent with malware in version 3.1.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
What our analysis found
BMW M4 City Ride Live Wallpaper, used by 3,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 medium), led by remote code loading. It comes from a trusted publisher and was last updated in November 2025.
Key findings
- medium· remote code loading —The server-supplied `html` string is written unsanitized into the new-tab override page's DOM, so can render arbitrary markup (links, forms, iframes, images) in a page the user sees on every new tab, at any time after install and with no extension update. MV3's extension CSP blocks inline script and innerHTML does not execute <script>, so this is not remote code execution, and with only `search` plus its own API host the extension cannot read page or user data; the risk is a persistent, silently updatable content channel suitable for phishing or redirect campaigns. The related remote shortcut list (:21-31, 94-106) lets the same server choose every tile's destination URL, which maps to the advertised "Popular Shortcuts" feature but widens the same channel.
The extension does exactly what the listing describes (looping MP4 wallpaper, clock, chrome.search.query search box, shortcut tiles, sticky notes), and no user data ever leaves the device: every outbound call is a payload-less GET to the first-party plus Google Fonts and the s2 favicon service, and search is delegated to the user's own default engine rather than hijacked. The single genuine concern is:41-65, which fetches a JSON blob from and assigns its `html` field straight into popupContainer.innerHTML on the chrome_url_overrides new-tab page, giving the server an unsanitized, arbitrary-HTML surface on every new tab (MV3 CSP stops it being script execution, but not server-pushed);:21-31 similarly lets the server dictate the href of every shortcut tile. The publisher's 62% malicious rate and the 33% permhash cluster corroborate the ML score but are model-adjacent context, not code evidence; against them, I verified from the stored 3.1.0 CRX is stock (87,533 bytes, zero `chrome.`/`gameograf`/`sendBeacon` hits), so there is no hidden payload in the 87 KB the file-level bundle omitted.
BMW M4 City Ride Live Wallpaper Chrome extension security report
ID: lnbdenbfciegcgchfofaehfiodnakmmb
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://gameograf.com/
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- US
- Address
- 1 Manhattan West 395 Ninth Ave. New York, NY 10001. Phone: 212-789-2000 New York, NY 10001 US
- Website
- Visit
Screenshots & videos
Install growth
Gain full insight into all external connections.
Upgrade for full visibility.
About this extension
Experience the thrill of a BMW M4 cruising through the city with this sleek, high-speed live wallpaper! 🏙️🚗💨
Read the publisher’s full description
Transform your new tab into a dynamic, urban nightscape as the powerful BMW M4 takes you on a stylish ride through the city streets. This live wallpaper brings the elegance and raw energy of BMW to your browser, making it perfect for car enthusiasts and those who appreciate the blend of luxury and performance. With practical features and a polished design, this extension makes each tab feel like an exhilarating drive. Key Features 🖼️ Dynamic HD looped Christmas cabin live wallpaper. 📰 News Feed Bar – Stay updated with trending anime, gaming, K-pop, and entertainment news. 🔗 Popular Shortcuts – Quick access to YouTube, Netflix, ChatGPT, Amazon, and more. ➕ Custom Shortcuts – Add your favorite websites for instant access. 🔍 Search Bar – Works seamlessly with your default search engine. 🕒 Clock & Date – Minimalist, always-on time & date widget. 📝 Sticky Notes – Colorful, draggable notes on your new tab. 🔔 Notifications – Get alerts about new wallpapers & features. 📧 Google Apps – One-click access to Gmail, Maps, Drive, and more. 🤖 ChatGPT Widget – Ask questions and get instant AI-powered answers. ✅ To-Do List – Organize your daily tasks directly on your new tab. 📅 Calendar Tool – Keep track of important dates. 🧮 Calculator – Perform calculations without leaving Chrome. ⏳ Timer – Built-in countdown for productivity or breaks. 🛠 More Tools – Includes privacy settings, uninstall guide, and support. About Us Gameograf.com creates exclusive Chrome new tab extensions to make browsing more personalized and fun. Explore our vast library of anime & manga, K-pop, cars & bikes, sports, celebrities, and more unique themes designed for fans worldwide. 🌐 Website: https://gameograf.com 📩 Contact: https://gameograf.com/contact-us/ 🔒 Privacy Policy: https://gameograf.com/privacy-policy/ 💬 Feedback: https://gameograf.com/feedback/ 📧 Email: support@gameograf.com Affiliate Policy Notice When installed, this extension opens a new tab at https://gameograf.com, where you can explore similar themes. Some links may include affiliate partnerships, meaning Gameograf.com may earn a small commission if you purchase through them. These commissions help us maintain and improve our free extensions.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from https://gameograf.com/
- Cristiano Ronaldo Live Wallpaper20,000 users
- Anime Cursor - Custom Cursor for Chrome™ - All in One Anime Cursors20,000 users
- Gameograf ONE - Live Wallpapers20,000 users
- Demon Slayer Infinity Castle Gameograf10,000 users
- Nissan Skyline Live Wallpaper New Tab10,000 users
Popular in Art & Design
- Image downloader - Imageye1,000,000 users
- Image Downloader1,000,000 users
- OceanHero: Save Our Oceans by Surfing the Web500,000 users
- Save Image As PNG400,000 users
- Gimp online - image editor and paint tool300,000 users