Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →
Also reported by raw.githubusercontent.com
Sasuke Uchiha Chidori Live Wallpaper
Marketplace listing not found
Our last marketplace check could not find this listing in Chrome Web Store. It may have been removed or delisted. Existing installs may still run, but verify the publisher and package source before installing or updating.
Confirmed member of a tracked malicious supply-chain campaign.
Analysis record
- Analysed
- 4 months ago
- Version
- v14.4.1
- Artifact
- SHA256 684…7A9
- Source
- Findings (non-IoC)
Network indicator detail is shown below
23 aggregate findings were counted. 23 network indicators contributed to the aggregate finding count.
Publisher Evidence
Limited evidencePublisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.
11 evidence rows available.
Finding Categories
Requested Permissions
1 permissionAI Security Report
AI Security Review
Evidence context: threat category none; evidence quality moderate.
The extension "Sasuke Uchiha Chidori Live Wallpaper" (version 1.2.3, Chrome store) functions as a visual customization tool displaying animated content themed around the Naruto anime character Sasuke Uchiha. The security analysis reveals zero findings across all categories in the findings_by_category bucket. This includes no IoC (Indicators of Compromise) detections, no YARA code-smell matches, no obfuscation indicators, and no malware signatures.
The extension's declared purpose—providing a live wallpaper experience—aligns with its minimal security profile. Live wallpaper extensions typically operate locally without requiring network access, credential handling, or system-level permissions. The absence of network-related findings (no custom search engine domains, no data exfiltration patterns, no third-party API calls) is consistent with this use case. The description field states "Unleash Sasuke's Chidori in a lightning-charged 4K anime masterpiece!" which describes a visual content extension rather than any functional tool requiring elevated permissions.
The developer attribution shows a Gmail address ([email protected]) rather than a verified organization or company name. While this prevents identity verification, Gmail addresses are common for independent developers creating niche content extensions. The extension has 155 users, indicating limited but genuine adoption in the Chrome Web Store ecosystem. The version number 1.2.3 suggests active development with multiple releases over time, which is typical for legitimate extensions rather than throwaway malicious tools.
Counterargument Consideration: A skeptic might argue that the completely empty findings_by_category bucket indicates the security analysis didn't run properly, suggesting the verdict should be incomplete_data rather than likely_false_positive. However, the extension metadata is complete and consistent (version 1.2.3, 155 users, developer name present), which would typically accompany a full analysis run. Additionally, live wallpaper extensions have inherently minimal attack surfaces—they don't require network permissions, don't handle sensitive data, and don't interact with browser APIs in ways that trigger security findings. The absence of findings is therefore consistent with the extension's benign purpose rather than an analysis failure. If the analysis had failed, the store and version fields would likely also be missing or marked as unknown.
Recommendation: No action required. The extension shows no evidence of malicious behavior, typosquatting, or data exfiltration. The findings are consistent with a legitimate live wallpaper extension from an independent developer. Monitor for future updates that might introduce concerning findings.
Key Reasons
- Empty findings_by_category bucket with zero detections
- Extension type (live wallpaper) has minimal attack surface
- No IoC, code-smell, or malware signature findings
- Version 1.2.3 indicates active development
False Positive Considerations
- Zero findings across all security categories
- Benign extension type (live wallpaper)
- No network or credential access required
Reviewed 2026-04-26; recommended action: no action; model confidence 70%.
Source Code Not Available
Source code is not available for this version of the extension.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
Nissan GTR R33 Cherry Blossoms Forza Horizon 6 Live Wallpaper
[email protected]
Chrome Virus Cleaner Speed Booster
[email protected]
JJK Gojo Sukuna Toji Uraume Live Wallpaper
[email protected]
Michael Jackson's Iconic Dance Live Wallpaper
[email protected]
Goku Ultra Instinct Master Live Wallpaper
[email protected]
Haikyuu!! Anime Volleyball – Top 8 4K Wallpapers
[email protected]