'Super Mario' runs amok in Chrome Web app store
Data-swiping games turn up — and unauthorized apps can do some damage

It sounds ludicrous, but it's a real fear if you plan on downloading two new versions of the classic Nintendo games "Super Mario World" or "Super Mario World 2," both reformatted as apps for Google's Chrome Web Store.
In exchange for letting you squash angry turtles on the way to saving Princess Peach, these apparently unauthorized "Super Mario" apps can access your data on all websites, your browsing history, all your bookmarks and possibly even other apps you've installed and your physical location.

(There is no indication Nintendo is involved with either of these apps; both apps were developed by someone calling himself "chromitude." Requests to Nintendo for comment were not immediately returned.)
If you think that what Evil Mario and Luigi want sounds like a gross invasion of privacy, you're not alone.
Game wants more than just your participation
"WAAAAY too much permissions asked. Why need bookmarks, browse history and all website data? I recommend not to use this app," a March 23 comment on the "Super Mario" app download page reads.

A May 11 post expresses similar bewilderment at the game, which already has more than 42,000 users: "Why does this game require access to my data on all web pages?? Not reasonable with those accesses. Will not install this. Looks like some scam to me."
A March 7 user comments for "Super Mario 2" — 13,726 users — highlights the severity of an app that has such complete access to your Web habits.
"This item can read every page that you visit — your bank, your web email, your Facebook page and so on."
"This gives your computer a virus," reads a comment posted five days ago.
Mikko Hypponen, chief research officer for the Finnish security firm F-Secure, told SecurityNewsDaily that he believes these rogue-looking "Super Mario" apps are not fraudulent, but rather cases of "aggressive marketing" designed to profile "your online use so they can market to you better."

What is Google doing to keep the Web store safe?

Google's hands-off approach