Lightning McQueen Live Wallpaper
Marketplace listing not found
Our last marketplace check could not find this listing in Chrome Web Store. It may have been removed or delisted. Existing installs may still run, but verify the publisher and package source before installing or updating.
Score-based assessment (medium risk, 44/100). No analyst review available.
Analysis record
- Analysed
- 7 months ago
- Version
- v4.4.3
- Artifact
- SHA256 287…F80
- Source
- Findings (non-IoC)
Evidence ledger
Ranked by severity · findings with a source location link to the code viewer
YARA Rule Matches
10 rules| Severity | Rule | Hits | Files | Metadata |
|---|---|---|---|---|
| LOW | postinstall file download | 1 | img/bg.mp4 | - |
| LOW | SQLInjection | 2 | script.jsjquery-3.7.1.min.js | - |
| LOW | NoUseWeakRandom | 2 | script.jsjquery-3.7.1.min.js | - |
| LOW | LocalStorageShouldNotBeUsed | 1 | script.js | - |
| LOW | credential env files | 1 | img/bg.mp4 | - |
| LOW | postinstall crypto operations | 3 | img/bg.mp4_metadata/verified_contents.jsonjquery-3.7.1.min.js | - |
| LOW | postinstall file manipulation | 3 | style.cssscript.jsjquery-3.7.1.min.js | - |
| LOW | postinstall obfuscation | 2 | img/bg.mp4jquery-3.7.1.min.js | - |
| LOW | postinstall network communication | 3 | img/bg.mp4index.htmljquery-3.7.1.min.js | - |
| LOW | postinstall system command | 2 | img/bg.mp4jquery-3.7.1.min.js | - |
Publisher Evidence
Limited evidencePublisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.
11 evidence rows available.
Finding Categories
YARA Rules Matched
10 rules(20 hits)Requested Permissions
1 permissionAI Security Report
AI Security Review
Evidence context: threat category none; evidence quality strong.
The extension 'Lightning McQueen Live Wallpaper' (v4.4.3) shows no security findings in the evidence bundle. The findings_by_category object is empty, indicating no code-smell, IoCs, obfuscation, or malware signatures were detected. The developer uses a personal Gmail address ([email protected]), which is acceptable for legitimate extensions. The extension's name references a well-known Disney character without typosquatting indicators. The low user count (55) does not inherently indicate risk. The described functionality (live wallpapers for Chrome) is unusual but aligns with new tab page customization, a common extension use case. No suspicious domains or behaviors were identified. The strongest counterargument is the non-standard 'live wallpaper' claim, which may mislead users about Chrome's capabilities. However, without evidence of deceptive behavior or malicious code, this remains a benign extension with standard functionality.
Key Reasons
- No security findings detected in analysis
- Legitimate extension name referencing known character
- Developer uses acceptable personal email
- Low user count does not indicate risk
- No suspicious domains or behaviors identified
Reviewed 2026-04-23; recommended action: no action; model confidence 90%.
Source Code Not Available
Source code is not available for this version of the extension.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
Nissan GTR R33 Cherry Blossoms Forza Horizon 6 Live Wallpaper
[email protected]
Chrome Virus Cleaner Speed Booster
[email protected]
JJK Gojo Sukuna Toji Uraume Live Wallpaper
[email protected]
Michael Jackson's Iconic Dance Live Wallpaper
[email protected]
Goku Ultra Instinct Master Live Wallpaper
[email protected]
Haikyuu!! Anime Volleyball – Top 8 4K Wallpapers
[email protected]