Chrome Web Store
3Versions
1Code reviewed

Caution required

Suspicious in code review (v1.0.0)

Our reviewer found behaviour consistent with malware in version 1.0.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

16 indicators in this extension

16 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

My Melody Kuromi Live Wallpaper, used by 6,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in August 2026.

Key findings

  • High

    Other

    The bundled manifest for v1.0.0 declares only the "search" permission and no host_permissions at all, but the live Chrome Web Store listing (v2.0) requests [domain withheld], added in the 1.1.0->2.0 transition on 2025-05-14. The domain is first-party (it matches the publisher email), so the host permission is not exfiltration on its own, but the code that actually uses that endpoint is absent from this bundle and cannot be reviewed. A new-tab extension that renders a local bg.mp4 and local wallpapers has no stated need for a remote API host, and the decoded confirms the signed v1.0.0 CRX contains only 10 files with no network-calling code.

Analyst notes

The bundled v1.0.0 code is clean: there is no anywhere, search goes through chrome.search.query (user's default engine, no hijack), the wallpaper is a local, and the only outbound traffic is first-party [domain withheld] tabs plus Google Fonts and s2 favicons — this contradicts the ML score of 0.74, whose total_js_size_bytes of 99,364 is almost entirely stock jquery-3.7.1.. However, the bundled manifest declares no host_permissions while the live listing (v2.0, change dated 2025-05-14) requests [domain withheld], so the ZIP under review predates the shipped code and I cannot clear the deployed version; the publisher is flagged malicious with sibling extensions malicious and 33% of the permhash cluster flagged, which corroborate caution, while chrome-stats and the Google trusted badge contradict it. Minor hygiene only, not findings::22 wipes all IndexedDB databases (own extension origin only, a no-op in v1.0.0), and the publisher 'website'/'privacy policy' fields are scraper artifacts pointing at Google's own help pages rather than the real first-party domains [domain withheld] and [domain withheld].

My Melody Kuromi Live Wallpaper

My Melody Kuromi Live Wallpaper Chrome extension security report

ID: mkggdfjjjljfnkcponiomlimekpeblgj

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2.0
Size
6.69 MB
Rating
4.8/5
Reviews
23
Users
6,000
Type
Extension
Updated
Aug 18, 2026
Category
Just for fun
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
114extensions
27 no longer listed

Publisher Contextual Analysis

Trusted
Author
https://haberikra.com/
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Address
Thunder Rd NW Concord, NC 28027 US
Website
Visit
Extensions
114
Active
87
Obsolete
27
Listed
114
Unlisted
0
Users
59,521

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
https://api.gameograf.com/*
Host
Medium
Host permission — access limited to this URL pattern.
search
Permission
Low
This permission accesses search functionality. Rated Low because it only interacts with the browser's search feature without accessing search history.

16 indicators in this extension

16 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Add a touch of cuteness and mischief to your browser with My Melody Kuromi Live Wallpaper

Read the publisher’s full description

Add a touch of cuteness and mischief to your browser with My Melody Kuromi Live Wallpaper, featuring adorable 4K visuals of the iconic Sanrio duo. Enjoy charming new tab backgrounds every time you open Chrome. Discover more at https://haberikra.com. Features 🎀 4K Live Wallpapers – Stunning My Melody and Kuromi images in ultra HD for a delightful browsing experience. 🌐 Popular Site Shortcuts – Quick access to your favorite websites with one click. ➕ Add & Remove Shortcuts – Personalize your new tab with customizable shortcuts. 🕰️ Clock & Date Display – Stay updated with a sleek built-in clock and date feature. 🔍 Search Bar – Search the web using your default search engine seamlessly. Additional Information This extension is secure, lightweight, and fast, with no access to personal data. You have full control and can uninstall it at any time using the “Uninstall” button. For more extensions, privacy policy, or support, visit: Explore More Extensions – Haberikra.com Privacy Policy – https://haberikra.com/privacy-policy/ Support – https://haberikra.com/contact-us About Us Haberikra.com creates custom Chrome new tab themes and wallpapers. Discover thousands of unique designs inspired by anime, cartoons, K-pop, games, cars, celebrities, and more. Make your browser truly yours. Website: https://haberikra.com Contact: https://haberikra.com/contact-us/ Privacy Policy: https://haberikra.com/privacy-policy/ Feedback: https://haberikra.com/feedback/ Email: info@haberikra.com Google Chrome Affiliate Program Disclosure This extension opens haberikra.com in a new tab after installation to provide helpful information and access to related content. All redirects follow Chrome’s affiliate policies and occur only with user interaction. Keywords My Melody Kuromi Live Wallpaper, Sanrio wallpaper, cute anime wallpaper, kawaii Chrome theme, My Melody Kuromi HD

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
12

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

16 indicators in this extension

16 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.0.0
Latest
6.69 MBCaution0
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
1.1.0
6.69 MBNot scanned—
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
2.0
6.69 MBNot scanned—
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Just for Fun