[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Miles Morales Noir Black Spider-Man Live Wallpaper

Version 4.40.0 View in Chrome Web Store

Last scanned: about 4 hours ago

Extension Details

Developer: https://gameograf.com/

Rating: 5.0 ★ (8 ratings)

Users: 1,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a perfect 5.0 rating but with only 8 reviews, which is insufficient to establish reliability. With just 1,000 users, it has limited adoption. The developer website gameograf.com appears to be a gaming-related site, which aligns with the wallpaper theme. However, the small user base and minimal review count make it difficult to assess trustworthiness.

Concerns: The primary concern is the broad host permissions to api.gameograf.com, which allows the extension to communicate with external servers. While the "search" permission seems minimal for a wallpaper extension, the combination of external API access raises questions about data collection. The extension's functionality as a live wallpaper doesn't clearly justify needing to contact external APIs, suggesting potential unnecessary permissions. The lack of transparency about what data might be transmitted to the developer's servers is concerning.

Recommendations: Consider running this extension in a separate Chrome profile to isolate it from your main browsing data. Before installing, verify that gameograf.com is a legitimate website and review their privacy policy if available. Monitor your browser's network activity after installation to see what data, if any, is being sent to external servers. Given the limited user base and reviews, you might want to look for more established wallpaper extensions with better transparency about their data practices.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

Security Analysis Details

Required Permissions:

Host Permissions:

https://api.gameograf.com/*

Embedded URLs (14 total):

https://fonts.googleapis.com	https://fonts.gstatic.com
https://fonts.googleapis.com/css2?family=Poppins:ital	https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz
https://clients2.google.com/service/update2/crx	https://api.gameograf.com/
https://chrome.google.com/webstore/detail/	https://gameograf.com/top-100/
https://gameograf.com/privacy-policy	https://api.gameograf.com/popup/message.json
https://gameograf.com/?utm_source=install&utm_medium=link&utm_campaign=bg&utm_content=install	https://gameograf.com/?utm_source=gameograf&utm_medium=link&utm_campaign=bg&utm_content=uninstall
https://api.gameograf.com/js/shortcuts.json	https://www.google.com/s2/favicons?domain=

Raw Manifest

{
  "name": "__MSG_appName__",
  "icons": {
    "16": "img/128.png",
    "48": "img/128.png",
    "128": "img/128.png"
  },
  "author": "Gameograf",
  "version": "4.40.0",
  "background": {
    "service_worker": "js/bg.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "permissions": [
    "search"
  ],
  "default_locale": "en",
  "host_permissions": [
    "https://api.gameograf.com/*"
  ],
  "manifest_version": 3,
  "chrome_url_overrides": {
    "newtab": "newtab.html"
  }
}

by ✦ Astarte