Chrome Web Store
2Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. Review the permissions below before installing.

12 indicators in this extension

12 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Chiikawa Wallpaper New Tap, used by 2,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in November 2025.

Analyst notes

All five JS files behave as a plain wallpaper new-tab page: local /*.jpg backgrounds (:22-39,:348-363), a clock, user-managed shortcuts, and search delegated to the user's own default engine via chrome.search.query (:93-99) — the opposite of the search-hijack pattern that dominates this permhash cluster. There is no POST anywhere, no access, no content scripts, no, and the bundled manifest matches the published CWS manifest exactly (permissions=[search], host_permissions=[[domain withheld]]). The two remote channels are first-party GETs of JSON to the publisher's own [domain withheld] — a shortcut list (:10-19, which does clobber user-added shortcuts on each load, a bug not an attack) and an announcement blob rendered with popupContainer.innerHTML on the new tab (:41-58); with no content_security_policy override the MV3 default CSP blocks script and inline handlers in that HTML, so it is not remote code loading, but it is server-controllable page content that could change after review, which is why this is likely_benign rather than false_positive. I verified the one file missing from the bundle (, referenced at:17) against Google's signed treehash in: the Merkle root _Yxbe0Cs7YXTBT7WZ_ reproduces exactly from stock jQuery 3.7.1 fetched from [domain withheld], jsDelivr and Google CDN, so the vendored library is unmodified. The malext-feed 'malware' note is a bulk third-party feed import, not a code review, and the code does not corroborate it; chrome-stats () and our risk engine contradict the ML score, while the permhash cluster and the ML score itself are the only corroborating signals and neither survives contact with the source.

Chiikawa Wallpaper New Tap

Chiikawa Wallpaper New Tap Chrome extension security report

ID: mecihpfpediakpadcjdkdcjhkgkkmnbj

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2.1.0
Size
32.78 MB
Rating
4.7/5
Reviews
10
Users
2,000
Type
Extension
Updated
Nov 14, 2025
Category
Functionality & ui
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1452extensions
397 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
https://gameograf.com/
Country
US
Address
4557 De Silva St Fremont, CA 94538-2506 US
Website
Visit
Extensions
1452
Active
1054
Obsolete
397
Listed
1452
Unlisted
0
Users
1,038,982

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
https://api.gameograf.com/*
Host
Medium
Host permission — access limited to this URL pattern.
search
Permission
Low
This permission accesses search functionality. Rated Low because it only interacts with the browser's search feature without accessing search history.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

12 indicators in this extension

12 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Enjoy adorable Chiikawa wallpapers with cute characters in HD every time you open a new tab.

Read the publisher’s full description

Brighten up your browser with adorable Chiikawa wallpapers, featuring your favorite cute characters in high-quality images every time you open a new tab. Enjoy 10 carefully selected wallpapers showcasing Chiikawa, Hachiware, and Usagi in fun and heartwarming moments. Perfect for fans of this beloved kawaii series! 🐰 Features: 🖼️ HD Wallpapers – Enjoy a fresh Chiikawa image with every new tab. 🔗 Popular Site Shortcuts – Quick access to your favorite websites. ➕ Add & Remove Shortcuts – Personalize your browsing experience. 🕒 Clock & Date Display – Stay up to date with a stylish time widget. 🔍 Search Bar – Use your preferred search engine seamlessly. 🌟 More Options: 🐱 Explore More Extensions – Find more kawaii wallpapers at https://gameograf.com. 🔒 Privacy Policy – Read our privacy policy at https://gameograf.com/privacy-policy/. 🛠️ Support – Need help? Contact us at https://gameograf.com/contact-us/. ❌ Uninstall – Remove the extension anytime via Chrome settings. ⭐ Rate App – Love it? Leave us a review! 🐹 About Us Gameograf.com designs high-quality Chrome new tab themes and extensions. Browse popular categories like sports stars, anime, cars, music icons, K-pop, and more. Website: https://gameograf.com Contact: https://gameograf.com/contact-us/ Privacy Policy: https://gameograf.com/privacy-policy/ Feedback: https://gameograf.com/feedback/ Email: info@gameograf.com Google Chrome Affiliate Program Disclosure This extension may open gameograf.com on new tabs to introduce its features and related content. All links are user-focused and require user approval per Chrome's affiliate guidelines. Keywords: Chiikawa Wallpaper, Cute Anime Backgrounds, Kawaii Characters, New Tab Chrome Theme, Chiikawa HD Images

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
12

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

12 indicators in this extension

12 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.1.0
Latest
32.78 MBNo malware found0
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
1.0.0
32.78 MBNot scanned—
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Store rankings

Where this extension appears in store category, collection and keyword rankings.