Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →
Also reported by raw.githubusercontent.com
Anime Demon Girl Samurai Katana Live Wallpaper
Marketplace listing not found
Our last marketplace check could not find this listing in Chrome Web Store. It may have been removed or delisted. Existing installs may still run, but verify the publisher and package source before installing or updating.
Confirmed member of a tracked malicious supply-chain campaign.
Analysis record
- Analysed
- 7 months ago
- Version
- v4.4.3
- Artifact
- SHA256 F46…A4F
- Source
- Findings (non-IoC)
Evidence ledger
Ranked by severity · findings with a source location link to the code viewer
YARA Rule Matches
8 rules| Severity | Rule | Hits | Files | Metadata |
|---|---|---|---|---|
| LOW | LocalStorageShouldNotBeUsed | 1 | script.js | - |
| LOW | postinstall crypto operations | 2 | _metadata/verified_contents.jsonjquery-3.7.1.min.js | - |
| LOW | postinstall file manipulation | 3 | script.jsstyle.cssjquery-3.7.1.min.js | - |
| LOW | postinstall obfuscation | 1 | jquery-3.7.1.min.js | - |
| LOW | postinstall network communication | 3 | img/bg.mp4index.htmljquery-3.7.1.min.js | - |
| LOW | postinstall system command | 2 | img/bg.mp4jquery-3.7.1.min.js | - |
| LOW | SQLInjection | 2 | script.jsjquery-3.7.1.min.js | - |
| LOW | NoUseWeakRandom | 2 | script.jsjquery-3.7.1.min.js | - |
Publisher Evidence
Limited evidencePublisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.
11 evidence rows available.
Finding Categories
YARA Rules Matched
8 rules(16 hits)Requested Permissions
1 permissionAI Security Report
AI Security Review
Evidence context: threat category none; evidence quality weak.
The extension "Anime Demon Girl Samurai Katana Live Wallpaper" presents no security findings across any category. The findings_by_category bucket is completely empty, indicating no IoCs, code-smell detections, obfuscation markers, or malware signatures were identified during analysis.
The extension metadata shows a specific, non-impersonating name that does not mimic popular extensions. The description clearly states the purpose as providing anime-themed live wallpapers featuring a demon samurai character with a katana. The developer account ([email protected]) is a personal Gmail address rather than a verified company account, which is common for small, niche extensions but limits accountability. The user count of 22 indicates this is a very small extension with minimal adoption. The version number 4.4.3 suggests some development history.
Counterargument: A skeptic could argue that the empty findings bucket indicates incomplete analysis rather than clean code. If the analysis did not scan files or the data is stale, the lack of findings does not prove safety. However, the version number is specified (not 'unknown') and a UUID exists, suggesting the analysis infrastructure processed this extension. Without evidence of malicious behavior, the default position should be benign. Additionally, the extension name and description are straightforward with no indicators of typosquatting, browser hijacking, or credential theft patterns.
Assessment: This extension appears to be a legitimate, niche anime wallpaper tool with no detected security concerns. Live wallpaper extensions typically require display and potentially network permissions that could theoretically be misused, though no evidence of such misuse exists here. The personal developer account and low user count mean there is limited community scrutiny. Users should understand that while no malicious behavior is detected, the extension's capabilities could be misused in future updates if the developer account is compromised.
Key Reasons
- No security findings detected in any category
- Extension name and description indicate legitimate purpose
- No typosquatting or impersonation indicators
- Personal developer account is common for niche extensions
- Empty findings bucket suggests clean code or limited analysis
Reviewed 2026-04-23; recommended action: no action; model confidence 60%.
Source Code Not Available
Source code is not available for this version of the extension.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
Nissan GTR R33 Cherry Blossoms Forza Horizon 6 Live Wallpaper
[email protected]
Chrome Virus Cleaner Speed Booster
[email protected]
JJK Gojo Sukuna Toji Uraume Live Wallpaper
[email protected]
Michael Jackson's Iconic Dance Live Wallpaper
[email protected]
Goku Ultra Instinct Master Live Wallpaper
[email protected]
Haikyuu!! Anime Volleyball – Top 8 4K Wallpapers
[email protected]