Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →
Also reported by raw.githubusercontent.com
Sasuke Uchiha Neon BMW M4 Naruto Live Wallpaper
Marketplace listing not found
Our last marketplace check could not find this listing in Chrome Web Store. It may have been removed or delisted. Existing installs may still run, but verify the publisher and package source before installing or updating.
Confirmed member of a tracked malicious supply-chain campaign.
Analysis record
- Analysed
- 7 months ago
- Version
- v4.4.3
- Artifact
- SHA256 BDF…030
- Source
- Findings (non-IoC)
No Findings
All security checks passed
Publisher Evidence
Limited evidencePublisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.
11 evidence rows available.
No Threats Detected
This extension passed all security checks
AI Security Report
AI Security Review
Evidence context: threat category none; evidence quality weak.
The CVEQ analysis of 'Sasuke Uchiha Neon BMW M4 Naruto Live Wallpaper' (UUID: 55298518-79ca-5a07-a70e-bea849a53ec3) returned zero findings across all security categories. The findings_summary explicitly shows 0 IoCs, 0 malware signatures, 0 network findings, 0 obfuscation indicators, and 0 code-smell detections. This clean result is significant because the CVEQ platform typically flags extensions with even minor anomalies.
The extension description indicates it provides anime-themed live wallpapers featuring 'Sasuke Uchiha with BMW M4 neon power,' which aligns with the extension name. This is a content-focused extension rather than one with system-level capabilities. The developer is listed as '[email protected]' — an anonymous email address rather than a verified company or developer account. While anonymous publishing is a weak risk signal, it is common for hobbyist extensions and does not constitute evidence of malicious intent.
No suspicious domains appear in the IoC findings. The findings_by_category object is empty, meaning the static analysis found no external network connections to unknown services, no credential access patterns, and no browser hijacking mechanisms. The extension has 73 users, which is low but not inherently suspicious for a niche anime-themed wallpaper extension.
The strongest counterargument to this verdict is that zero findings could indicate incomplete analysis rather than genuine cleanliness. A skeptic might argue that the CVEQ analysis failed to properly scan the extension files, leaving potential threats undetected. However, the findings_summary structure shows all categories were evaluated (ioc, malware-signature, malware, manifest-analysis, network, obfuscation, dependency, secret, code-smell, tool-poisoning), and each returned 0 rather than being absent from the report. This suggests the analysis completed successfully but found no security concerns. If the analysis had failed, the data would likely show missing fields or error states rather than explicit zero counts across all categories.
Another potential concern is the version number (4.4.3), which suggests multiple updates over time. However, without malware signatures or obfuscation findings, version iteration alone does not indicate malicious activity. The extension's purpose (live wallpapers) is benign, and the name does not mimic any known popular extension, ruling out typosquatting.
Given the complete absence of security findings, the extension should be treated as a false positive from CVEQ's initial triage. No action is required beyond standard monitoring.
Key Reasons
- Zero findings in all security categories
- No malware signatures or obfuscation detected
- Extension name is descriptive without typosquatting indicators
- No suspicious network domains in IoC findings
False Positive Considerations
- Zero security findings across all analysis categories
- Extension name is descriptive and not impersonating known software
- No suspicious domains or network indicators detected
Reviewed 2026-05-07; recommended action: suppress false positive; model confidence 85%.
Source Code Not Available
Source code is not available for this version of the extension.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
Nissan GTR R33 Cherry Blossoms Forza Horizon 6 Live Wallpaper
[email protected]
Chrome Virus Cleaner Speed Booster
[email protected]
JJK Gojo Sukuna Toji Uraume Live Wallpaper
[email protected]
Michael Jackson's Iconic Dance Live Wallpaper
[email protected]
Goku Ultra Instinct Master Live Wallpaper
[email protected]
Haikyuu!! Anime Volleyball – Top 8 4K Wallpapers
[email protected]