Extension Details
Context-Aware Verdict
The extension appears to be a simple wallpaper application focused on Mercedes F1 car themes. With 1,000 users and a perfect 5.0 rating from 7 reviews, it shows positive user feedback despite a relatively small user base. The developer domain owhit.com suggests a dedicated website presence. The extension uses Manifest V3, which is Google's latest and more secure extension framework with enhanced security controls.
The main concern is the "search" permission, which seems unnecessary for a wallpaper extension. Typically, wallpaper extensions only need to modify the new tab page or browser appearance and shouldn't require search functionality. This permission could potentially allow the extension to intercept or modify search queries, though the security scan found no actual implementation of concerning behavior.
The small user base (1,000 users) means less community vetting compared to more popular extensions, and the limited number of reviews (7) makes it harder to assess real-world performance and trustworthiness.
This extension appears safe for general use given the minimal security findings and positive user feedback. However, if you're particularly security-conscious, you could monitor your search behavior after installation to ensure no unexpected modifications occur. The unnecessary search permission warrants some caution, but the overall risk remains very low for a wallpaper extension.
Findings
Security Analysis Details
Required Permissions:
- search
Embedded URLs (18 total):
| https://fonts.googleapis.com | https://fonts.gstatic.com | |
| https://fonts.googleapis.com/css2?family=Poppins:ital | https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz | |
| https://chromewallpaper.com/?utm_source=install&utm_medium=link&utm_campaign=bg&utm_content=install | https://chromewallpaper.com/?utm_source=owhit&utm_medium=link&utm_campaign=bg&utm_content=owhit | |
| https://chrome.google.com/webstore/detail/ | https://chromewallpaper.com/ | |
| https://chromewallpaper.com/privacy-policy | https://yowgames.com/games/ | |
| https://www.youtube.com | https://chatgpt.com | |
| https://www.instagram.com | https://x.com | |
| https://www.netflix.com | https://www.google.com/s2/favicons?domain= | |
| https://mlionltd.github.io/space/ | https://clients2.google.com/service/update2/crx |
Raw Manifest
{ "name": "__MSG_appName__", "icons": { "16": "img/128.png", "48": "img/128.png", "128": "img/128.png" }, "author": "Owhit", "version": "1.1.9", "background": { "service_worker": "/js/bg.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_appDesc__", "permissions": [ "search" ], "default_locale": "en", "manifest_version": 3, "chrome_url_overrides": { "newtab": "index.html" } }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.