Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →
Also reported by raw.githubusercontent.com
Cat Sakura Street Pixel Live Wallpaper New Tab
Confirmed member of a tracked malicious supply-chain campaign.
Analysis record
- Analysed
- 1 weeks ago
- Version
- v3.6
- Artifact
- SHA256 E76…804
- Source
- Findings (non-IoC)
Evidence ledger
Ranked by severity · findings with a source location link to the code viewer
YARA Rule Matches
10 rules| Severity | Rule | Hits | Files | Metadata |
|---|---|---|---|---|
| LOW | postinstall file download | 5 | js/background.jsjs/sidePanel.jsjs/popup.js +2 more | - |
| LOW | SQLInjection | 3 | js/jquery-3.7.1.min.jsjs/script.jsjs/todo.js | - |
| LOW | NoUseWeakRandom | 2 | js/jquery-3.7.1.min.jsjs/createStickyNote.js | - |
| LOW | LocalStorageShouldNotBeUsed | 3 | js/createStickyNote.jsjs/script.jsjs/todo.js | - |
| LOW | postinstall persistence mechanism | 1 | js/background.js | - |
| LOW | postinstall file manipulation | 14 | js/todo.jsjs/popup.jsjs/calculator.js +11 more | - |
| LOW | postinstall network communication | 7 | js/background.jsnewtab.htmljs/jquery-3.7.1.min.js +4 more | - |
| LOW | postinstall crypto operations | 3 | js/jquery-3.7.1.min.jsjs/script.js_metadata/verified_contents.json | - |
| LOW | postinstall obfuscation | 5 | js/jquery-3.7.1.min.jsjs/background.jsjs/sidePanel.js +2 more | - |
| LOW | postinstall system command | 2 | js/jquery-3.7.1.min.jsimg/bg.mp4 | - |
Publisher Evidence
Limited evidencePublisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.
11 evidence rows available.
Finding Categories
YARA Rules Matched
10 rules(45 hits)Requested Permissions
4 permissionsAI Security Report
AI Security Review
Evidence context: threat category none; evidence quality weak.
The extension "Cat Sakura Street Pixel Live Wallpaper New Tab" (version 3.5) is a new tab page replacement that displays pixel art wallpaper featuring a cat and sakura street theme. The developer is identified as "[email protected]", which appears to be a legitimate email address rather than an anonymous account.
The CVEQ analysis returned an empty findings object with zero detections across all security categories. No malware signatures, suspicious IoCs, code-smell patterns, or obfuscation indicators were flagged. The extension name is descriptive and does not attempt to impersonate any well-known extension. The description clearly states the extension's purpose as a live wallpaper for new tabs, which aligns with the naming convention.
With 635 users, this extension has moderate adoption but is not at a scale that would indicate widespread malicious distribution. The version number (3.5) suggests active maintenance and multiple releases over time, which is consistent with legitimate extension development practices.
Counterargument: A skeptic might argue that the empty findings object indicates an incomplete analysis rather than a genuinely clean scan. Without visibility into whether files were actually scanned, there is uncertainty about the thoroughness of the security review. However, the extension metadata is complete (developer email, version, description, user count), and the extension name and description are transparent about its functionality. There are no red flags in the available metadata that would warrant suspicion. If the analysis had failed or been incomplete, other indicators like missing version information or absent developer attribution would typically be present. Given the absence of any suspicious signals and the presence of legitimate metadata, the most reasonable conclusion is that this extension is benign.
Recommendation: No action is required. This extension serves a cosmetic purpose (new tab wallpaper) with no identified security risks. Users seeking aesthetic customization for their browser can safely install this extension.
Key Reasons
- Empty findings object with no security detections
- Legitimate developer email attribution ([email protected])
- Descriptive name matching stated functionality
- No typosquatting or impersonation indicators
- Moderate user count (635) with version history suggesting maintenance
Reviewed 2026-04-25; recommended action: no action; model confidence 75%.
Chrome version history
Risk trend by version
2 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.
Pick any point on the chart to explore that version's code below.
Source Code Not Available
Source code is not available for this version of the extension.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
Minato And Naruto Live Wallpaper
[email protected]
Shoto Todoroki My Hero Academia Live Wallpaper
[email protected]
Ferrari Racer Live Wallpaper
[email protected]
BMW i7 Neon Red Cyberpunk Luxury Live Wallpaper
[email protected]
Winter Snowy House Day and Night Live Wallpaper
[email protected]
Sharingan Circle Naruto Shippuden Live Wallpaper
[email protected]