Is Art Wallpapers New Tab safe?

Medium risk

Art Wallpapers New Tab sends typed new-tab search text to Mystart or SearchesSweet for search suggestions.

When you type in its new-tab search box, the extension reads the current input and requests autocomplete suggestions before you submit the search. Depending on the selected search path, it posts the query text to mystart.com/api/autosuggest/ or sends it to searchessweet.com/suggest.

Arts Happenv3.0.19Chrome Web Store
45Risk
Who publishes it

Arts Happen - no other listings under this identity, 5 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Arts Happen

Shared hosts - 5 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

uninstall.mystart.com
Also called by 1 other listing: Pawtastic
pinterest.ca
Also called by 5 other listings, including Winter Chill HD Wallpapers New Tab
proxy.mystart.com
Also called by 5 other listings, including Pawtastic, Horse
searchessweet.com
Also called by 6 other listings, including Pawtastic, Horse
thumb.mystartcdn.com
Also called by 6 other listings, including Pawtastic, Horse

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab search text is sent to suggestion endpoints before submission.

Typing in the Art Wallpapers New Tab search box can send that text to Mystart and SearchesSweet suggestion endpoints before you submit the search.

The data sent is form input, the typed search text used for suggestions.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

You type in the extension's new-tab search box.

The extension did this

The extension sends the typed search text to suggestion endpoints before the final search is submitted.

Captured request
POSThttps://mystart.com/api/autosuggest/; https://searchessweet.com/suggest
Fields in the request
  • Search box text
    weather tomorrow (illustrative)

    Text you type in the extension's new-tab search box can be sent for suggestions before you submit the search.

Observation

Dynamic analysis confirmed that the new-tab override reads the search input and routes suggestion requests to the reported endpoints before the final search navigation.

What it can do

Permissions this extension asks for, as declared in version 3.0.19. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

  • Read the sites you visit most

    topSites

Where it sends data

Destinations our analysis observed Arts Happen contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • mystart.com

    Arts Happen sends data to mystart.com. No other extension we have analysed sends data here.

  • searchessweet.com

    Arts Happen sends data to searchessweet.com. No other extension we have analysed sends data here.

Updated 30 September 2026gpbioggjdpkjpjmedkjcjdclbllginfk