Demon Slayer Chibi Tanjiro Nezuko Anime Cat Festival Live Wallpaper

AI Security Review

Evidence context: threat category none; evidence quality moderate.

This extension replaces the new tab page with anime artwork, sold as "Demon Slayer Chibi Tanjiro Nezuko Anime Cat Festival Live Wallpaper" and published under [email protected]. It declares no permissions and no host permissions at all. For a wallpaper extension that is the expected shape: a new tab override renders its own HTML and needs no access to tabs, storage, cookies or scripting. Nothing in the package lets it read the pages you visit, and no content script capability is declared.

Every medium-severity finding is tagged to extracted_from_files, and none carries a real file path. They are IoC strings. XIOC-DOMAIN-l.bt, XIOC-DOMAIN-sj.tj, XIOC-DOMAIN-v.td, XIOC-DOMAIN-v.ck, XIOC-DOMAIN-ɜ.iq and XIOC-DOMAIN-m.gl are single-letter or two-letter labels glued to two-letter country codes. That is the shape of minified JavaScript, where a variable like v indexed into an object property produces a token the extractor reads as a hostname. XIOC-URL-https://x.com is a social link. jquery.org is a reference to a bundled copy of jQuery. The c2.af entry in the extracted endpoint list is the same artifact: .af is Afghanistan's country suffix, and c2 is a minified variable name rather than a command-and-control host.

The low-severity findings are all code-smell rules. That class fires on ordinary patterns such as fetch and process.env access, and it fires on essentially any bundled library. There are no malware signatures, no obfuscation findings, no dependency findings, no secret findings, no tool-poisoning findings and no network findings.

A skeptic would point out that the publisher is an anonymous Gmail address, the store name is stuffed with keywords, and live wallpaper extensions are a category that gets bought and repurposed for ad injection. All true. Ad injection still needs either content scripts running on pages or a hijacked search provider, and this package declares neither. There are no host permissions to read page content, no search override among the extracted endpoints, and no code path reaching a known monetization domain. A keyword-stuffed name is marketing. What would change the verdict: manifest analysis showing a content script matched against all URLs, an obfuscation finding outside a locale file, or a network finding to an ad or analytics host. None of those appear here.

The finding volume is an extractor reading minified tokens as domains.

Key Reasons

• Every medium-severity IoC is a minified-variable fragment misread as a two-letter-TLD domain, including XIOC-DOMAIN-l.bt, XIOC-DOMAIN-sj.tj and XIOC-DOMAIN-v.td
• Zero malware-signature, obfuscation, network, dependency, secret or tool-poisoning findings across the package
• Empty permissions and host_permissions arrays leave the extension no path to browsing data
• The remaining findings are low-severity code-smell rules that fire on any bundled JavaScript
• jquery.org in the endpoint list traces to a bundled library rather than a remote service

False Positive Considerations

• IoCs are minified-variable fragments misread as two-letter-TLD domains
• Low-severity code-smell rules fire on any non-trivial JavaScript bundle
• A bundled copy of jQuery produces the jquery.org endpoint hit
• The endpoint list mixes extractor artifacts with a social profile link

Reviewed 2026-10-01; recommended action: suppress false positive; model confidence 74%.