Chrome Web Store
5Versions
2Code reviewed

Caution required

Suspicious in code review (v2.2.0)

Our reviewer found behaviour consistent with malware in version 2.2.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

44 indicators in this extension

44 indicators
2 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Luffy Zoro Epic Duo in One Piece Live Wallpaper, used by 10,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in September 2025.

Key findings

  • High

    Other

    The bundled manifest declares only the `search` permission and no host_permissions, while the live Chrome Web Store listing declares host_permissions ['[domain withheld]'] — a capability no reviewed file in this artifact uses (there is no fetch, XHR, or reference to [domain withheld] in,,, or). The published version therefore requests server access that this reviewed code does not, meaning the artifact analyzed is not the code the extension's 10,000 users currently execute. The destination is first-party (the publisher-level privacy policy is itself hosted at [domain withheld]), so this is unreviewed added capability rather than proven exfiltration, but it defeats the purpose of clearing this version.

Analyst notes

The bundled v2.2.0 code is a plain new-tab wallpaper: no anywhere, no content scripts, no host_permissions, no, no obfuscation; the single `search` permission is used only by chrome.search.query in:191, tabs point at the publisher's own [domain withheld] (:4,14), and the indexedDB.databases() wipe in:19-25 runs in the extension's own origin so it cannot touch site data. The ML evidence is purely structural (file counts, 95,677 total JS bytes, js_ratio_if 0.07) with zero behavioural regex hits, which contradicts the 0.87 score. What keeps this from clearing is that the live CWS listing declares host_permissions ['[domain withheld]'] that this artifact neither declares nor uses (corroborated by chrome-stats' access-to-specific-domain reason), so the reviewed code is not what the 10,000 current users run; (~87KB, nearly all the JS the model sized) was listed in but not supplied, and the shortcut tiles are publisher-controlled [domain withheld] redirects (:6-42) that can be retargeted without an extension update. Publisher reputation ( malicious), the 33%-flagged permhash cluster and the malext feed note corroborate suspicion at the publisher level; the v2.2.0 code itself does not.

Luffy Zoro Epic Duo in One Piece Live Wallpaper

Luffy Zoro Epic Duo in One Piece Live Wallpaper Chrome extension security report

ID: ffofcflbkaemkobogongmanblnpjfkkp

Supported Languages

🇺🇸English
🇫🇷French
🇩🇪German
🇯🇵Japanese
🇰🇷Korean
🇷🇺Russian
🇪🇸Spanish

Extension Info & Metadata

Status
Active
Version
3.0
Size
34.77 MB
Rating
4.9/5
Reviews
18
Users
10,000
Type
Extension
Updated
Sep 10, 2025
Category
Just for fun
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1409extensions
390 no longer listed

Publisher Contextual Analysis

Trusted
Author
https://gameograf.com/
Country
US
Address
Thunder Rd NW Concord, NC 28027 US
Website
Visit
Extensions
1409
Active
1018
Obsolete
390
Listed
1409
Unlisted
0
Users
751,916

Screenshots & videos

Screenshot 1
Screenshot 2

Install growth

Item
Type
Severity
Description
https://api.gameograf.com/*
Host
Medium
Host permission — access limited to this URL pattern.
search
Permission
Low
This permission accesses search functionality. Rated Low because it only interacts with the browser's search feature without accessing search history.

44 indicators in this extension

44 indicators
2 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Celebrate the dynamic duo of Monkey D. Luffy and Roronoa Zoro with an epic One Piece live wallpaper for your browser.

Read the publisher’s full description

Join the Straw Hat crew's captain and first mate as they stand together, ready to conquer the Grand Line. This Luffy and Zoro live wallpaper brings the unbreakable bond and legendary determination of One Piece's iconic duo to your new tab screen, making every browsing session feel like an adventure. Key Features: 🏴‍☠️ Epic Duo Visuals: Admire the strength and camaraderie of Luffy and Zoro every time you open a tab. 🔗 Popular Shortcuts – One-click access to YouTube, Netflix, ChatGPT, Amazon, and more. ➕ Custom Shortcuts – Add your own favorite sites for quick access. 🔍 Search Bar – Works seamlessly with your chosen search engine. 🕒 Clock & Date – Always-visible, stylish time & date display. 📝 Sticky Notes – Colorful, draggable notes directly on your new tab. 🔔 Notifications – Stay informed about new wallpapers & features. 📧 Google Apps – Fast access to Gmail, Drive, Maps, and more. 🤖 ChatGPT Widget – Get instant AI-powered answers. ✅ To-Do List – Manage tasks easily in your new tab. 📅 Calendar Tool – Keep track of important events. 🧮 Calculator – Do calculations without leaving Chrome. ⏳ Timer – Countdown tool for breaks or productivity. 🛠 More Tools – Full control over settings, uninstall guide, and support. About Us Gameograf.com offers unique Chrome new tab extensions and themes. Explore categories like anime, fantasy, music, cars, gaming, K-pop, sports, and more. Website: https://gameograf.com Contact: https://gameograf.com/contact-us/ Privacy Policy: https://gameograf.com/privacy-policy/ Feedback: https://gameograf.com/feedback/ Email: info@gameograf.com Google Chrome Affiliate Program Disclosure Upon installation, this extension may open gameograf.com to inform users about features and similar content. All redirects serve user interest and require consent, in accordance with Chrome’s affiliate guidelines.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
44

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

44 indicators in this extension

44 indicators
2 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.0.0
Latest
34.70 MBCaution0
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
2.2.0
34.83 MBCaution0
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
2.40.0
34.70 MBNot scanned—
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
3.0
34.77 MBNot scanned—
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
1
48.26 MBNot scanned—
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
Showing 1 to 5 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.