Chrome Web StoreCaution required
Suspicious in code review (v3.4)
Our reviewer found behaviour consistent with malware in version 3.4, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
What our analysis found
Neko Anime Girl In The Rain Live Wallpaper, used by 2,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 medium), led by remote code loading. It comes from a trusted publisher and was last updated in May 2026.
Key findings
- Medium
Remote Code Loading
Server-supplied HTML is assigned directly to innerHTML on the extension's own new-tab page with no sanitisation, so the publisher can change what every one of the 3,000 users sees at any time without shipping an update. The MV3 default CSP blocks <script> and inline on* handlers, so this is not code execution, but full-page <style> overlays, <iframe src>, <form action> to an arbitrary host, and arbitrary all render, which is sufficient for a credential-phishing overlay on a trusted chrome-extension:// origin; the timestamp field lets the server re-arm the banner repeatedly. The same pattern repeats at:21-31 and 94-106, where remote values (url, name, icon) are interpolated unescaped into a jQuery.append template, letting the server silently repoint the advertised 'YouTube / Amazon / Netflix' shortcuts.
Analyst notes
This is a real anime new-tab wallpaper extension (video background, clock, chrome.search box, localStorage shortcuts and sticky notes) and no user data ever leaves the device, but:41-66 fetches an unsanitized HTML blob from [domain withheld] and assigns it straight to popupContainer.innerHTML on every new tab, giving the publisher a server-side switch to render arbitrary markup (full-page <style> overlays, <iframe src>, <form action> posting anywhere, arbitrary) on a privileged chrome-extension:// page, re-armable at will by bumping the JSON timestamp; the manifest declares no content_security_policy, so the MV3 default does block <script> and on* handlers, which is why this is remote HTML rather than remote code execution. A second remote-data sink at:21-31 feeds into the jQuery template at 94-106 with interpolated unescaped, so the server also controls where every 'popular shortcut' points. The listing does disclose a notifications feature and the destination is first-party ([domain withheld] matches host_permissions and the author domain [domain withheld]), so this reads as sloppy implementation of a disclosed feature rather than proven abuse; chrome-stats ( impact, likelihood) and the publisher's leave-one-out rate contradict the ML score, while the malext-feed note self-describes as 'not an independent code review' and the 33% permhash-cluster figure likely reflects that same bulk import, so neither corroborates. Confidence is medium because (the 4th JS file and ~87 KB of the 99,735 ML-counted bytes, confirmed present via) was not included in the bundle and a trojaned vendor library is a known hiding spot.
Neko Anime Girl In The Rain Live Wallpaper Chrome extension security report
ID: jjcmodckokjdbgdjahmkcmkincjkgljp
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://gameograf.com/
- Privacy
- Privacy Policy
- Country
- US
- Address
- Thunder Rd NW Concord, NC 28027 US
- Website
- Visit
Screenshots & videos
Install growth
About this extension
Embrace the peaceful beauty of a rainy day with a cute neko anime girl in this stunning live wallpaper for your new tab!
Read the publisher’s full description
Immerse yourself in a serene and enchanting anime scene with the Neko Anime Girl In The Rain Live Wallpaper. This Chrome extension captures the delicate beauty of a neko girl standing in the rain, creating a peaceful and captivating atmosphere for your new tabs. Perfect for anime enthusiasts who love tranquil moments! 🔹 Features: 🖼️ Live Wallpaper – Lightweight animated background of Neko Anime Girl In The Rain. 🔗 Popular Shortcuts – Quick links to YouTube, Amazon, ChatGPT, Netflix, and more. ➕ Custom Shortcut – Add your own favorite websites for fast access. 🔍 Search Bar – Uses your browser’s default search engine right from the new tab. 🔔 Notifications – Stay updated on new themes and features. 🕒 Clock & Date – Displays real-time time and date to keep you on track. 🗒️ Sticky Notes – Create unlimited colorful, draggable sticky notes to organize your thoughts or to-dos. ⚙️ More Tools & Info – Access privacy policy, uninstall guide, feedback form, and more Gameograf extensions. About Us Gameograf.com crafts unique Chrome new tab extensions and themes tailored to your interests. Explore our ever-growing library of categories—from anime & manga, music artists, cars & bikes, sports teams & athletes, celebrities, to K‑pop—and find the perfect background every time. Discover more at: https://gameograf.com Contact us: https://gameograf.com/contact-us/ Privacy Policy: https://gameograf.com/privacy-policy/ Send Feedback: https://gameograf.com/feedback/ Email: support@gameograf.com Google Chrome Affiliate Policy Disclosure This extension opens https://gameograf.com in a new tab to inform users about the downloaded extension, improve user experience, and provide access to related extensions. It may include affiliate links to services or products, all of which require user consent before any action and aim solely to benefit the user.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
No network indicators were extracted from this version.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from https://gameograf.com/
- Anime Cursor - Custom Cursor for Chrome™ - All in One Anime Cursors40,000 users
- Gameograf ONE - Live Wallpapers20,000 users
- Cristiano Ronaldo Live Wallpaper20,000 users
- Nissan Skyline Live Wallpaper New Tab10,000 users
- Satoru Gojo: Jujutsu Sorcerer Live Wallpaper10,000 users
Popular in Art & Design
- Image downloader - Imageye2,000,000 users
- Image Downloader2,000,000 users
- Save Image As PNG500,000 users
- OceanHero: Save Our Oceans by Surfing the Web500,000 users
- Gimp online - image editor and paint tool300,000 users