Chrome Web Store
5Versions
1Code reviewed

Caution required

Suspicious in code review (v3.0.0)

Our reviewer found behaviour consistent with malware in version 3.0.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

What our analysis found

Tanjiro Kamado Kimetsu No Yaiba Gameograf, used by 1,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in October 2026.

Key findings

  • High

    Other

    The bundled manifest declares no host_permissions at all, while the live Chrome Web Store manifest for this listing declares host_permissions: ["[domain withheld]"]; chrome-stats independently reports domain access to [domain withheld]. The ZIP reviewed here therefore is not the build users receive: the published build has outbound network capability to a publisher API that has no counterpart anywhere in,, or. The listing also advertises a "News Feed Bar" that is entirely absent from this code, which is consistent with a later build shipping logic that could not be examined.

Analyst notes

Every file in the bundle is a plain jQuery new-tab wallpaper::100 hands the query to chrome.search.query (the only chrome API beyond), backgrounds come from a local or a FileReader data URL kept in localStorage (:155-160), shortcuts are stored in localStorage, and there is not a single, eval, Function(), remote script, read, or obfuscated string table anywhere; contains no external url() or @import, and confirms the only unsupplied script is stock (~87 KB, matching the 99 KB total against 12.6 KB of readable JS). The ML score is therefore uncorroborated by the reviewed code, and the permhash cluster (11,189 members sharing only "search") is too generic to carry weight; chrome-stats (impact, trusted publisher) and the publisher's rate contradict the flag. What keeps this from a benign verdict is scope, not evidence of malice: the reviewed 3.0.0 ZIP lacks the live listing's [domain withheld] host permission and the advertised news-feed feature, so the build users actually run contains network code outside this review. Rationale-only hygiene notes (not findings): unconditionally deletes every IndexedDB database, though only within the extension's own origin; uses chrome.management.uninstallSelf, which needs no permission; the Amazon shortcut is an [domain withheld] affiliate link; the chrome.search.query result callback at:102 is dead code since the API returns nothing; and the shortcut template at:286 interpolates user-supplied unescaped, which is self-XSS on the extension's own new-tab page only.

Tanjiro Kamado Kimetsu No Yaiba Gameograf

Tanjiro Kamado Kimetsu No Yaiba Gameograf Chrome extension security report

ID: dpelbehmajbmhlbnoapglodmmbpdogep

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
3.51
Size
10.40 MB
Rating
5.0/5
Reviews
2
Users
1,000
Type
Extension
Updated
Oct 9, 2026
Category
Just for fun
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1433extensions
393 no longer listed

Publisher Contextual Analysis

Trusted
Author
https://gameograf.com/
Country
US
Address
4557 De Silva St Fremont, CA 94538-2506 US
Website
Visit
Extensions
1433
Active
1039
Obsolete
393
Listed
1433
Unlisted
0
Users
934,850

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://api.gameograf.com/*
Host
Medium
Host permission — access limited to this URL pattern.
search
Permission
Low
This permission accesses search functionality. Rated Low because it only interacts with the browser's search feature without accessing search history.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

About this extension

Experience the world of Tanjiro Kamado with vibrant HD live video wallpapers every time you open a new tab.

Read the publisher’s full description

Tanjiro Kamado – Kimetsu No Yaiba Live Wallpaper New Tab Bring the determined and courageous Tanjiro Kamado to your browser with the Kimetsu No Yaiba Live Wallpaper. Each new tab opens with a stunning HD video featuring Tanjiro in action, showcasing his swordsmanship, Water Breathing techniques, and dynamic anime-inspired visuals. Perfect for Kimetsu No Yaiba fans who want heroic and immersive new tab experiences. Extension Features 💧 Tanjiro Kamado Video – Dynamic HD looped live wallpaper featuring Tanjiro Kamado from Kimetsu No Yaiba. 📰 News Feed Bar – Stay updated with trending anime, gaming, K-pop, and entertainment news. 🔗 Popular Shortcuts – Quick access to YouTube, Netflix, ChatGPT, Amazon, and more. ➕ Custom Shortcuts – Add your favorite websites for instant access. 🔍 Search Bar – Works seamlessly with your default search engine. 🕒 Clock & Date – Minimalist, always-on time & date widget. 📝 Sticky Notes – Colorful, draggable notes on your new tab. 🔔 Notifications – Get alerts about new wallpapers & features. 📧 Google Apps – One-click access to Gmail, Maps, Drive, and more. 🤖 ChatGPT Widget – Ask questions and get instant AI-powered answers. ✅ To-Do List – Organize your daily tasks directly on your new tab. 📅 Calendar Tool – Keep track of important dates. 🧮 Calculator – Perform calculations without leaving Chrome. ⏳ Timer – Built-in countdown for productivity or breaks. 🛠 More Tools – Includes privacy settings, uninstall guide, and support. About Us Gameograf.com creates exclusive Chrome new tab extensions to make browsing more personalized and fun. Explore our vast library of anime & manga, K-pop, cars & bikes, sports, celebrities, and more unique themes designed for fans worldwide. 🌐 Website: https://gameograf.com 📩 Contact: https://gameograf.com/contact-us/ 🔒 Privacy Policy: https://gameograf.com/privacy-policy/ 💬 Feedback: https://gameograf.com/feedback/ 📧 Email: support@gameograf.com Affiliate Policy Notice When installed, this extension opens a new tab at https://gameograf.com , where you can explore similar themes and tutorials. Some links on our website may include affiliate partnerships, which means Gameograf.com may earn a small commission if you purchase through them. These commissions help us maintain and improve our free extensions.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
3.51
Latest
10.40 MBNot scanned—
343f287e6d12825df64c62a2be0f8588752dd1f55a775c3456f396a4d897ee24
3.0.0
23.01 MBCaution0
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
3.40.0
23.01 MBNot scanned—
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
3.50
23.07 MBNot scanned—
2419329067823cab5b4e5ac5dd18a6abf1f57f45e753f5fc934292f3085a3717
2.1
34.71 MBNot scanned—N/A
Showing 1 to 5 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.