Chrome Web Store
3Versions
1Code reviewed

Caution required

Suspicious in code review (v3.10.0)

Our reviewer found behaviour consistent with malware in version 3.10.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

19 indicators in this extension

19 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Little Twin Stars Wallpaper is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in May 2025.

Key findings

  • High

    Other

    The bundled 3.10.0 manifest declares only the "search" permission and no host_permissions, while the live CWS listing declares [domain withheld], so the reviewed code is not the code deployed to the 844 installs. In the newer 3.30.0 CRX that host access feeds server-controlled content into the privileged new-tab override: assigns remote markup from [domain withheld] straight to popupContainer.innerHTML, and:16 fetches the entire shortcut list from [domain withheld], whose shipped defaults are [domain withheld] redirectors. Both let the publisher change what the new tab shows and where its links point at any time without store review, which is why the clean 3.10.0 review cannot clear the extension as deployed.

Analyst notes

The reviewed 3.10.0 bundle is clean:, and contain no at all, the only outbound URLs are Google Fonts, [domain withheld], and [domain withheld] tabs,:21's only url() is a local, and is 87,533 bytes with the canonical UMD ending and only jQuery's own $.ajax XHR (stock by size and tail; no corpus copies were available to diff against). The concern is a real bundled-vs-published manifest mismatch: the live listing declares host_permissions [domain withheld] which 3.10.0 does not, and the newer 3.30.0 CRX in our own store uses that access for two publisher-controlled remote channels — popupContainer.innerHTML = html from, and a remotely loaded shortcut list from whose defaults are [domain withheld] redirectors — so the code running on users' browsers is not the code reviewed and its new-tab content can be changed without store review. Signals contradicting malware: the malext-feed label's own basis field states it is not a code review, and chrome-stats plus the trusted-publisher badge agree the manifest is benign; the 33% permhash cluster is weak because a search-only new-tab template is generic, and the publisher's 1,388 extensions indicate a templated farm, which is context rather than evidence. Destination is first-party and no user data leaves the browser, and MV3 extension-page CSP blocks scripts in the injected markup, so this is sloppy remote-content plumbing rather than proven malice.

Little Twin Stars Wallpaper

Little Twin Stars Wallpaper Chrome extension security report

ID: jocdlimckippcledbhdpchljgafhacbe

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
3.30.0
Size
1.58 MB
Rating
5.0/5
Reviews
4
Users
829
Type
Extension
Updated
May 15, 2025
Category
Just for fun
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1449extensions
393 no longer listed

Publisher Contextual Analysis

Trusted
Author
https://gameograf.com/
Country
US
Address
King phillip Rd Mattapoisett, MA 02739 US
Website
Visit
Extensions
1449
Active
1055
Obsolete
393
Listed
1449
Unlisted
0
Users
964,189

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
https://api.gameograf.com/*
Host
Medium
Host permission — access limited to this URL pattern.
search
Permission
Low
This permission accesses search functionality. Rated Low because it only interacts with the browser's search feature without accessing search history.

19 indicators in this extension

19 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Add a touch of magic to your browser with Little Twin Stars Wallpaper...

Read the publisher’s full description

Add a touch of magic to your browser with Little Twin Stars Live Wallpaper, featuring charming and colorful images of the adorable Sanrio characters. Enjoy their dreamy world every time you open a new tab. Learn more at https://gameograf.com. Features 🌟 HD Live Wallpapers – Immerse yourself in vibrant and high-quality Little Twin Stars visuals. 🌐 Quick Site Shortcuts – Instantly access your favorite websites. ➕ Customizable Shortcuts – Easily add or remove shortcuts to fit your browsing style. 🕰️ Clock & Date Display – Stay updated with a stylish clock and date widget. 🔍 Search Bar – Search the web with your chosen search engine directly from the new tab. Additional Information This extension is secure, fast, and easy to use, with no access to personal data. You can uninstall it anytime via the “Uninstall” button. For more extensions, privacy policy, or support, visit: About Us Gameograf.com designs custom Chrome new tab themes and extensions. Explore our collection featuring anime, manga, K-pop, sports, celebrities, cars, and more—perfect for personalizing your browser experience. Website: https://gameograf.com Contact: https://gameograf.com/contact-us/ Privacy Policy: https://gameograf.com/privacy-policy/ Feedback: https://gameograf.com/feedback/ Email: info@gameograf.com Google Chrome Affiliate Program Disclosure This extension opens gameograf.com in a new tab after installation to inform users about the extension and provide access to similar content. Redirects comply with Chrome’s affiliate program and are user-initiated only. Keywords Little Twin Stars Live Wallpaper, Sanrio wallpaper, cute pastel wallpaper, kawaii Chrome theme, Little Twin Stars HD

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
19

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

19 indicators in this extension

19 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
3.10.0
Latest
1.45 MBCaution0
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
3.30.0
1.58 MBNot scanned—
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
3.0.0
1.46 MBNot scanned—
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.