Chrome Web Store
3Versions
1Code reviewed

Caution required

Suspicious in code review (v1.0.0)

Our reviewer found behaviour consistent with malware in version 1.0.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

19 indicators in this extension

19 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Peach and Goma Live Wallpapers, used by 1,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in May 2025.

Key findings

  • High

    Other

    The bundled manifest declares no `host_permissions` at all, but the live Chrome Web Store manifest for this listing declares `[domain withheld] — independently corroborated by chrome-stats' `access-to-specific-domain: [domain withheld]` impact reason. No file in this bundle references `[domain withheld]`, so the published build contains network capability and presumably code that is not present in the artifact under review, which is the classic shape of a delayed-malicious or staged update. Any clean reading of the code below therefore cannot be extended to what users actually have installed.

Analyst notes

The bundled build is a template new-tab wallpaper page (note the leftover `const theme = "porsche911gt"` at:1) with no data collection: search goes through `chrome.search.query` to the user's own default engine (:95) with no hardcoded search feed, the:19-25 IndexedDB wipe only reaches the extension's own origin, and the single remote fetch (`[domain withheld],:466-470) is unreachable dead code because `total_videos` is read at: but never declared. What keeps this out of a benign verdict is that the artifact reviewed is demonstrably not the artifact users run: the bundled manifest declares no `host_permissions`, while the live CWS manifest adds `[domain withheld] (corroborated independently by chrome-stats' `access-to-specific-domain: [domain withheld]`), and nothing in this code ever contacts that host. Contradicting the ML score and the 33%-malware permhash cluster (a generic `search`+newtab cluster whose usual pattern is search hijacking, absent here): no obfuscation, no eval, no content scripts, no injection; the install tab, uninstall URL, privacy-policy link, "More Extensions" link and the shortcut deceptively labelled "Web Store" all point at `[domain withheld]` rather than the publisher's `[domain withheld]`, but they carry only UTM parameters, so that is hygiene rather than exfiltration; caveat that ` ` and ` ` are in the signed file list but absent from this bundle and were not reviewed, and the dead-code conclusion holds only if that jQuery is stock.

Peach and Goma Live Wallpapers

Peach and Goma Live Wallpapers Chrome extension security report

ID: lakfbghakbmegakblkjcmlhcpgikpcha

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2.30.0
Size
4.77 MB
Rating
5.0/5
Reviews
7
Users
1,000
Type
Extension
Updated
May 15, 2025
Category
Just for fun
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1433extensions
393 no longer listed

Publisher Contextual Analysis

Trusted
Author
https://gameograf.com/
Country
US
Address
4557 De Silva St Fremont, CA 94538-2506 US
Website
Visit
Extensions
1433
Active
1039
Obsolete
393
Listed
1433
Unlisted
0
Users
942,050

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
https://api.gameograf.com/*
Host
Medium
Host permission — access limited to this URL pattern.
search
Permission
Low
This permission accesses search functionality. Rated Low because it only interacts with the browser's search feature without accessing search history.

19 indicators in this extension

19 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Make your browsing experience cuter with Peach and Goma Live Wallpaper...

Read the publisher’s full description

Make your browsing experience cuter with Peach and Goma Live Wallpaper, featuring adorable illustrations of the lovable cat and dog duo. Enjoy their heartwarming moments every time you open a new tab. Learn more at https://gameograf.com. Features 🐾 HD Live Wallpapers – Delight in high-quality images of Peach and Goma in various adorable poses. 🌐 Quick Site Shortcuts – Easily access your favorite websites. ➕ Customizable Shortcuts – Add or remove shortcuts to suit your needs. 🕰️ Clock & Date Display – Stay informed with a built-in stylish clock and date. 🔍 Search Bar – Convenient web search using your preferred search engine. Additional Information This extension is secure, fast, and easy to use, with no access to personal data. You can uninstall it anytime using the “Uninstall” button at the bottom of the page. For more extensions, privacy policy, or support, visit: More Extensions – Haberikra.com Privacy Policy – https://gameograf.com/privacy-policy/ Support – https://gameograf.com/contact-us About Us Gameograf.com designs custom Chrome new tab themes and extensions. Explore our collection featuring anime, manga, K-pop, sports, celebrities, cars, and more—perfect for personalizing your browser experience. Website: https://gameograf.com Contact: https://gameograf.com/contact-us/ Privacy Policy: https://gameograf.com/privacy-policy/ Feedback: https://gameograf.com/feedback/ Email: info@gameograf.com Google Chrome Affiliate Program Disclosure This extension opens gameograf.com in a new tab after installation to inform users about the extension and provide access to similar content. Redirects comply with Chrome’s affiliate program and are user-initiated only. Keywords Peach and Goma Live Wallpaper, cute cat and dog wallpaper, kawaii Chrome theme, Peach and Goma HD, adorable animal wallpapers

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
19

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

19 indicators in this extension

19 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.0.0
Latest
4.64 MBCaution0
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
1.20.0
4.64 MBNot scanned—
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
2.30.0
4.77 MBNot scanned—
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.