Chrome Web StoreCaution required
Suspicious in code review (v1.1)
Our reviewer found behaviour consistent with malware in version 1.1, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
What our analysis found
BMW M4 Live Wallpaper, used by 1,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in June 2025.
Key findings
- High
Other
The bundled manifest declares only the `search` permission and no `host_permissions`, while the published CWS manifest declares `host_permissions: ["[domain withheld]"]` (independently corroborated by chrome-stats' access-to-specific-domain reason). No file in this signed build (,,,) references [domain withheld], so the live version carries a network capability whose consuming code was never available for review — the classic shape of a delayed-malicious update on a extension. Combined with the listing advertising Sticky Notes and Notifications features absent from this bundle and an author field ([domain withheld]) that differs from the publisher ([domain withheld]), the shipped artifact cannot be cleared from this ZIP alone.
Analyst notes
The signed build in hand is functionally benign: only opens the publisher's own [domain withheld] on and wipes the extension's own IndexedDB origin, is a jQuery new-tab page (clock, localStorage shortcuts, chrome.search.query against the user's default engine, local video) with no config, and the ML regex hits map to Google Fonts links, [domain withheld] anchors and the bundled jQuery. However, the live CWS listing requests host access to [domain withheld] that this bundled neither declares nor uses anywhere in the code, and chrome-stats independently reports [domain withheld] domain access, so the deployed build differs from what was reviewable; the listing also advertises Sticky Notes and Notifications that this bundle does not implement, and the bundled author is [domain withheld] while the publisher is [domain withheld]. The malext-feed label and the 33%-malicious permhash cluster weakly corroborate suspicion; chrome-stats and the Google trusted-publisher badge contradict it, but both only judge the manifest, not code — and the code that would use [domain withheld] is not in this ZIP. jquery-3.7.1. is signed in but was not supplied in the extract directory, so it is unreviewed.
BMW M4 Live Wallpaper Chrome extension security report
ID: manpgpcaciknnlnkempfpfggdmokjidp
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://gameograf.com/
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- US
- Address
- Thunder Rd NW Concord, NC 28027 US
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
About this extension
Redefine your browser experience with the power and precision of the BMW M4 Live Wallpaper.
Read the publisher’s full description
Immerse yourself in the sleek design and thrilling performance of this iconic sports car, captured in stunning detail. Key Features: 🚗 BMW M4 Elegance: Features the stunning BMW M4 in a dynamic and stylish setting. 🌟 High-Quality Visuals: Crystal-clear images to enhance your browsing atmosphere. 🔍 Default Search Engine Integration: Search effortlessly with your preferred search engine. 🗒️ Sticky Notes – Add unlimited colorful, draggable sticky notes. 🔔 Notifications – Stay updated on new themes and features. 🕒 Clock and Date: Stay updated with a seamlessly integrated time display. 🔗 Customizable Shortcuts: Personalize your new tab with quick access to your favorite sites. Unleash the spirit of speed and sophistication every time you open a new tab. Download the BMW M4 Live Wallpaper and elevate your browser’s style. About Us Gameograf.com designs custom Chrome new tab themes, specializing in anime, games, celebrities, sports, and more. Website: https://gameograf.com Contact: https://gameograf.com/contact-us/ Privacy Policy: https://gameograf.com/privacy-policy/ Feedback: https://gameograf.com/feedback/ Email: info@gameograf.com Google Chrome Affiliate Program Disclosure This extension may open gameograf.com in a new tab to provide users with theme-related info and other helpful resources. All redirects comply with Chrome’s affiliate policy and require user action.
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
No network indicators were extracted from this version.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
More from https://gameograf.com/
- Anime Cursor - Custom Cursor for Chrome™ - All in One Anime Cursors40,000 users
- Cristiano Ronaldo Live Wallpaper20,000 users
- Gameograf ONE New Tab: Live Wallpapers20,000 users
- Hello Kitty Live Wallpaper10,000 users
- Demon Slayer Infinity Castle Gameograf10,000 users
Popular in Art & Design
- Image downloader - Imageye2,000,000 users
- Image Downloader2,000,000 users
- Adobe Photoshop800,000 users
- Save Image As PNG500,000 users
- OceanHero: Save Our Oceans by Surfing the Web500,000 users