Chrome Web StoreNo malware found
In code review (v3.50)
Our reviewer read version 3.50 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
57 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Kyojuro Rengoku Demon Slayer Gameograf, used by 1,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 medium), led by remote code loading. It comes from a trusted publisher and was last updated in October 2026.
Key findings
- Medium
Remote Code Loading
The new-tab page injects an arbitrary HTML document fetched from the publisher's server straight into the DOM via innerHTML, on a 12-hour cadence. The manifest declares no content_security_policy, so the MV3 default (script-src 'self') blocks inline handlers and remote script — this is NOT remote code execution — but it does let the server place arbitrary markup, iframes, forms and links into a privileged chrome-extension:// page after store review, which is the standard delayed-monetisation and credential-phishing vector for this extension class.:82-92 is the second arm of the same channel: server-supplied link.url, link.name and link.icon from [domain withheld] are interpolated unescaped into a jQuery HTML template every hour, so the server also controls where the shortcut tiles point. The developer's own Turkish comment on the line above the injection ('you must be sure the content is trusted') acknowledges the channel is unvalidated, and both endpoints sit behind a Cloudflare managed challenge, so the payload actually served to users cannot be audited externally.
Analyst notes
Every line of this bundle is an ordinary anime live-wallpaper new-tab page: local clock (:164), chrome.search.query for the search box (:219, matching the single declared 'search' permission), localStorage-only sticky widgets, and three parameterless GETs that all go to the publisher's own domain ([domain withheld], [domain withheld], [domain withheld]). There is no content script, no access, no, no obfuscation, and no request anywhere that carries user data off the device, so the 0.77 ML score is not supported by the code. The bundled manifest matches the published manifest exactly; the chrome-stats score and the 1% publisher leave-one-out rate agree with my read, while the malext-feed 'malware' note and the 33% permhash-cluster flag rate do not — and both are uncorroborated here, since the permhash includes [domain withheld] so the 11,189-member cluster is largely this publisher's own new-tab template family, and the feed note itself states it was a bulk import rather than a code review. The one real weakness I cannot fully clear is the server-controlled HTML channel in (reported below); I tried to fetch both endpoints and Cloudflare returned a managed challenge instead of JSON, so the content served to real users is unverifiable from here, which keeps this at likely_benign rather than false_positive.
Kyojuro Rengoku Demon Slayer Gameograf Chrome extension security report
ID: gkjmphhabcjbjbkihcbofdjndjbhhbke
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://gameograf.com/
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- US
- Address
- 1 Manhattan West 395 Ninth Ave. New York, NY 10001. Phone: 212-789-2000 New York, NY 10001 US
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
57 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Experience Kyojuro Rengoku in vibrant HD live wallpaper, bringing the excitement of Demon Slayer to your new tab.
Read the publisher’s full description
Kyojuro Rengoku – Demon Slayer Live Wallpaper New Tab Ignite your browser with the fiery spirit of Demon Slayer using the Kyojuro Rengoku Live Wallpaper. Each new tab opens with a stunning HD video featuring Rengoku in action, showcasing his blazing sword techniques, heroic presence, and dynamic anime-inspired visuals. Perfect for Demon Slayer fans who want bold and thrilling new tab experiences. Extension Features 🔥 Kyojuro Rengoku Video – Dynamic HD looped live wallpaper featuring Kyojuro Rengoku from Demon Slayer. 📰 News Feed Bar – Stay updated with trending anime, gaming, K-pop, and entertainment news. 🔗 Popular Shortcuts – Quick access to YouTube, Netflix, ChatGPT, Amazon, and more. ➕ Custom Shortcuts – Add your favorite websites for instant access. 🔍 Search Bar – Works seamlessly with your default search engine. 🕒 Clock & Date – Minimalist, always-on time & date widget. 📝 Sticky Notes – Colorful, draggable notes on your new tab. 🔔 Notifications – Get alerts about new wallpapers & features. 📧 Google Apps – One-click access to Gmail, Maps, Drive, and more. 🤖 ChatGPT Widget – Ask questions and get instant AI-powered answers. ✅ To-Do List – Organize your daily tasks directly on your new tab. 📅 Calendar Tool – Keep track of important dates. 🧮 Calculator – Perform calculations without leaving Chrome. ⏳ Timer – Built-in countdown for productivity or breaks. 🛠 More Tools – Includes privacy settings, uninstall guide, and support. About Us Gameograf.com creates exclusive Chrome new tab extensions to make browsing more personalized and fun. Explore our vast library of anime & manga, K-pop, cars & bikes, sports, celebrities, and more unique themes designed for fans worldwide. 🌐 Website: https://gameograf.com 📩 Contact: https://gameograf.com/contact-us/ 🔒 Privacy Policy: https://gameograf.com/privacy-policy/ 💬 Feedback: https://gameograf.com/feedback/ 📧 Email: support@gameograf.com Affiliate Policy Notice When installed, this extension opens a new tab at https://gameograf.com , where you can explore similar themes and tutorials. Some links on our website may include affiliate partnerships, which means Gameograf.com may earn a small commission if you purchase through them. These commissions help us maintain and improve our free extensions.
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
57 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
More from https://gameograf.com/
- Anime Cursor - Custom Cursor for Chrome™ - All in One Anime Cursors40,000 users
- Sukuna X Gojo Jujutsu Kaisen Gameograf20,000 users
- Cristiano Ronaldo Live Wallpaper20,000 users
- Gameograf ONE New Tab: Live Wallpapers20,000 users
- Anime Live Wallpaper10,000 users
Popular in Just for Fun
- Custom Cursor for Chrome™6,000,000 users
- Return YouTube Dislike5,000,000 users
- Stylish - Custom themes for any website2,000,000 users
- Google Meet Enhanced Experience1,000,000 users
- FrankerFaceZ1,000,000 users