Chrome Web StoreCaution required
Suspicious in code review (v2.40.0)
Our reviewer found behaviour consistent with malware in version 2.40.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
42 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Nissan GTR Live Wallpaper New Tab, used by 5,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 medium), led by other. It comes from a trusted publisher and was last updated in August 2026.
Key findings
- Medium
Other
Arbitrary HTML supplied by the publisher's server is written unsanitised into the new-tab page and shown in a fixed, high-z-index overlay (:419-432) whenever the server raises `timestamp`. MV3's default CSP stops scripts from running, but the publisher can still place arbitrary links, forms and cross-origin iframes in front of 5,000 users on every new tab — a surface that bypasses Chrome Web Store review entirely, since no extension update is needed to change it. The listing describes a wallpaper with a news bar and shortcuts; a review-free channel for injecting unspecified markup is not disclosed anywhere in the listing or the privacy policy.
Analyst notes
The extension is a straightforward new-tab wallpaper: a local video, a clock, user-editable shortcut tiles in localStorage, and search routed through chrome.search.query (the user's own default engine, no hijack). The one real concern is server-controlled HTML::41-66 fetches [domain withheld] and assigns straight into #remote-popup.innerHTML, so the publisher can render arbitrary links, forms, images and cross-origin iframes in a fixed overlay (:419-432, z-index 99999) on every new tab by bumping a timestamp, with no user action and no new version review;:21-26 similarly takes shortcut tile hrefs from a remote JSON. No code executes through either sink (no content_security_policy key, so MV3's default script-src 'self' blocks inline handlers and remote scripts), nothing is sent outbound beyond two parameterless first-party GETs, and the bundled manifest matches the published one exactly. On signals: the 62%-malicious publisher figure, the 33% permhash cluster and the internal note all derive from the same malext feed import, which the note itself says is 'not an independent code review', so they are not independent corroboration; chrome-stats (impact, trusted publisher) and our own risk engine (Low) contradict the ML score. I could not observe the live payloads — both [domain withheld] endpoints returned a Cloudflare interstitial — so the capability is unobserved rather than proven benign or abused; that unreviewed remote-content channel is why this is suspicious and not benign.
Nissan GTR Live Wallpaper New Tab Chrome extension security report
ID: dkifdjjgjdojpifmcnacjkpbkjnebhbi
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://gameograf.com/
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- US
- Address
- Thunder Rd NW Concord, NC 28027 US
- Website
- Visit
Screenshots & videos
Install growth
42 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Feel the power of the Nissan GTR with this stunning Live Wallpaper on your Chrome new tab. Gameograf.com 🎯
Read the publisher’s full description
The Nissan GTR is a symbol of speed, precision, and cutting-edge automotive engineering. This extension brings the aggressive design and high-performance aesthetics of the GTR to your browser, immersing you in the world of Japanese supercars. Whether you're a motorsport enthusiast or a fan of legendary vehicles, the Nissan GTR Live Wallpaper will make your new tab look dynamic and stylish. 🚗 Features: 🏎️ Live Wallpaper – A high-quality Nissan GTR theme that transforms your new tab. 📰 News Feed Bar – Stay updated with trending anime, gaming, K-pop, and entertainment news. 🔗 Popular Site Shortcuts – Access your favorite websites instantly. ➕ Add & Remove Shortcuts – Customize your browsing experience with easy shortcut management. 🕒 Clock & Date Display – Keep track of time with a sleek clock and date widget. 🔍 Search Bar – Browse efficiently using your default search engine. 💖 More Options: 🎨 Explore More Extensions – Discover more car wallpapers at https://gameograf.com. 🔒 Privacy Policy – View our privacy policy at https://gameograf.com/privacy-policy/. 🛠️ Support – Need help? Contact us at https://gameograf.com/contact-us/. ❌ Uninstall – Easily remove the extension via Chrome settings. ⭐ Rate App – Love it? Give us a rating! 🚗 About Us Gameograf.com designs custom Chrome new tab themes and extensions. Explore our collection featuring anime, manga, K-pop, sports, celebrities, cars, and more—perfect for personalizing your browser experience. Website: https://gameograf.com Contact: https://gameograf.com/contact-us/ Privacy Policy: https://gameograf.com/privacy-policy/ Feedback: https://gameograf.com/feedback/ Email: info@gameograf.com Google Chrome Affiliate Program Disclosure This extension opens gameograf.com in a new tab after installation to inform users about the extension and provide access to similar content. Redirects comply with Chrome’s affiliate program and are user-initiated only. Keywords: Nissan GTR Live Wallpaper, Supercar Theme, Japanese Sports Car Wallpaper, Chrome Background, GTR New Tab
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
42 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from https://gameograf.com/
- Anime Cursor - Custom Cursor for Chrome™ - All in One Anime Cursors40,000 users
- Sukuna X Gojo Jujutsu Kaisen Gameograf20,000 users
- Gameograf ONE New Tab: Live Wallpapers20,000 users
- Cristiano Ronaldo Live Wallpaper20,000 users
- Demon Slayer Infinity Castle Gameograf10,000 users
Popular in Functionality & UI
- IDM Integration Module21,000,000 users
- Video Speed Controller3,000,000 users
- SponsorBlock for YouTube - Skip Sponsorships2,000,000 users
- OneTab2,000,000 users
- ChatbotsPlace: All-in-One AI Sidebar (ChatGPT, Claude & Gemini)1,000,000 users