Chrome Web StoreCaution required
Suspicious in code review (v2.0.0)
Our reviewer found behaviour consistent with malware in version 2.0.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
26 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Kylian Mbappe Real Madrid Wallpapers, used by 4,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in May 2025.
Key findings
- High
Other
The bundled manifest declares only the `search` permission and no `host_permissions` whatsoever, but the live Chrome Web Store manifest for this listing declares `host_permissions: ["[domain withheld]"]`, and chrome-stats independently reports an access-to-specific-domain grant for [domain withheld]. None of the four reviewed files (,,,) reference [domain withheld], so the code exercising that network capability is not present in the artifact I reviewed. A published build that holds a host permission with no counterpart in the analyzed package is exactly the delayed-malicious-update shape, and for a wallpaper new-tab extension an outbound channel to a publisher API is not justified by any stated feature (HD backgrounds, shortcuts, clock, search are all local or default-engine operations).
Analyst notes
Every line of the bundled 2.0.0 code is a plain jQuery new-tab wallpaper: draws a clock, renders localStorage-backed shortcuts and sets a random local background; search goes through chrome.search.query (the user's own default engine, no hijack); only opens the publisher's site on; opens the CWS review page and [domain withheld] links. There is no telemetry, no POST, no, no content script and no obfuscation. What blocks a benign verdict is a manifest discrepancy: the bundle declares no host_permissions at all, while the live CWS manifest adds [domain withheld] (independently corroborated by chrome-stats' access-to-specific-domain reason), and no code I can see uses that host, so the capability belongs to a build I was not given. Signals that corroborate concern: publisher flagged malicious with (62%) leave-one-out peers malicious, and 33% of the 11,223-member permhash cluster flagged; signals that contradict: the clean reviewed source, Google's trusted-publisher badge on both ext and pub, chrome-stats impact and likelihood, and our own risk engine's Low. The ML score itself is unsupported by the code — total_js_size_bytes 103,475 is essentially the bundled jquery-3.7.1. (referenced at:17 but not included in the bundle, so unreviewable), and js_exclamation=12, js_ratio_if=0.07, js_ratio_this=0.05, image_file_count=11 are generic counters with no malicious content behind them. Hygiene only, not findings: shortcut are interpolated into a template string passed to jQuery.append() (:244-256), which is self-XSS on the extension's own new-tab page;:19-25 deletes all IndexedDB databases, but only in the extension's own origin (stale video cache);:470-494 would fetch.mp4 blobs from the unrelated third-party [domain withheld], but total_videos is never declared anywhere in the bundle, so fetchAndStoreVideos throws a ReferenceError before any request is made and the path is dead.
Kylian Mbappe Real Madrid Wallpapers Chrome extension security report
ID: nhdliapoijnnjddkglniackcclnoelen
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://gameograf.com/
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- US
- Address
- Thunder Rd NW Concord, NC 28027 US
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
26 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Experience high-quality Kylian Mbappe Real Madrid Wallpapers New Tab featuring iconic images of Mbappe’s Real Madrid moments
Read the publisher’s full description
Kylian Mbappe Real Madrid Wallpapers New Tab brings you 10 stunning HD backgrounds capturing the dynamic flair of Mbappe on the pitch. Elevate your browsing with vivid visuals of Mbappe’s Real Madrid era. Enjoy the energy and style of one of football’s brightest stars every time you open a new tab. Extension Features 🖼️ HD Wallpapers – 10 carefully curated Kylian Mbappe Real Madrid backgrounds. 🌍 Popular Site Shortcuts – Quick access to your favorite websites. ➕ Add & Remove Shortcuts – Personalize your new tab with custom links. 🕒 Clock & Date Display – Stay updated with a sleek time and date widget. 🔎 Search Bar – Easily search with your default search engine. Kylian Mbappe, renowned for his speed, skill, and goal-scoring prowess, is a football phenomenon widely admired around the world. As a symbol of excellence on the field, his potential Real Madrid moments have captivated fans and media alike. These wallpapers celebrate his dynamic performances and the excitement he brings to the sport, embodying the spirit of modern football. 🌐 More Options 🎨 Explore More Extensions – Discover more football and celebrity wallpapers at https://gameograf.com. 🔒 Privacy Policy – Read our privacy policy at https://gameograf.com/privacy-policy/. 🛠️ Support – Need help? Contact us at https://gameograf.com/contact-us/. ❌ Uninstall – Easily remove the extension via Chrome settings. ⭐ Rate App – Enjoy it? Leave us a review! ℹ️ About Us Gameograf.com crafts unique Chrome new tab extensions and themes tailored to your interests. Explore our ever-growing library of categories—from anime & manga, music artists, cars & bikes, sports teams & athletes, celebrities, to K‑pop—and find the perfect background every time. Discover more at: https://gameograf.com Contact us: https://gameograf.com/contact-us/ Privacy Policy: https://gameograf.com/privacy-policy/ Send Feedback: https://gameograf.com/feedback/ Email: support@gameograf.com Google Chrome Affiliate Policy Disclosure This extension opens https://gameograf.com in a new tab to inform users about the downloaded extension, improve user experience, and provide access to related extensions. It may include affiliate links to services or products, all of which require user consent before any action and aim solely to benefit the user.
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
26 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
More from https://gameograf.com/
- Anime Cursor - Custom Cursor for Chrome™ - All in One Anime Cursors40,000 users
- Gameograf ONE New Tab: Live Wallpapers20,000 users
- Cristiano Ronaldo Live Wallpaper20,000 users
- Anime Live Wallpaper10,000 users
- Demon Slayer Infinity Castle Gameograf10,000 users
Popular in Art & Design
- Image downloader - Imageye2,000,000 users
- Image Downloader2,000,000 users
- Adobe Photoshop800,000 users
- Save Image As PNG500,000 users
- OceanHero: Save Our Oceans by Surfing the Web500,000 users