Chrome Web StoreCaution required
Suspicious in code review (v2.1)
Our reviewer found behaviour consistent with malware in version 2.1, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
101 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
BLACKBOX.AI, used by 500,000 people, is rated caution by Extension Auditor. Our code review reported 3 findings (3 high), led by other. Its permissions mean it can read and change data on all websites and can inject scripts into pages.
Key findings
- High
Other
The bundled manifest is version 2 with limited permissions, while the published Chrome Web Store manifest is version 3 with permissions 'scripting', 'tabs', 'notifications', and web_accessible_resources for *.js/*.css. This indicates the live extension likely differs from the reviewed code and may have more intrusive capabilities.
- High
Unauthorized Data Collection
This function uploads a captured screenshot (visible tab content) to [domain withheld] along with a user ID. The Chrome Web Store listing declares no data collection, making this hidden exfiltration of potentially sensitive screen content.
- High
Unauthorized Data Collection
This function sends the current YouTube video ID and user's search query to [domain withheld]. This collects browsing history without disclosure. The CWS listing claims no data collection.
Analyst notes
The extension collects browsing history (YouTube video IDs and search queries) and captures visible tab screenshots, sending them to [domain withheld] without disclosure in the Chrome Web Store listing (declared no data collection). The options page misleadingly suggests local save only. Additionally, the bundled manifest (v2) significantly mismatches the published manifest (v3 with extra permissions), indicating possible unauthorized change.
BLACKBOX.AI Chrome extension security report
ID: mcgbeeipkmelnpldkobichboakdfaeon
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- blackbox.ai
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
101 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Getting Started with BLACKBOX AI Extension Seamlessly integrate BLACKBOX AI into your existing workflow to supercharge your…
Read the publisher’s full description
Getting Started with BLACKBOX AI Extension Seamlessly integrate BLACKBOX AI into your existing workflow to supercharge your navigation experience. ### Code Chat: This is a walkthrough for using Code Chat to get answers to your coding questions: 1. Click on the Blackbox AI icon on the top right of your browser or click on "Manage Extension" then "Keyboard Shortcut" to assign a shortcut for opening the app. 2. Ask your coding question. 3. Get answers and suggestions in real-time. ### Add current page as context: To add the current page as context: 1. Click on the Blackbox AI icon on the top right of your browser or click on "Manage Extension" then "Keyboard Shortcut" to assign a shortcut for opening the app. 2. 1. Ensure "Include Context" option is activated. 3. Ask your question about page content. 4. Get answers and suggestions in real-time. ### Github Integration This is walkthrough for Github Integration : 1. When you view code on Github, you'll see a new button called "Code Chat" appear at the top of the code. 2. Ask your question about the code. 3. Get answers and suggestions in real-time. ### Image-To-Text This is walkthrough for OCR integration : 1. Press CTRL+E (Windows) or CMD+E (Mac) to activate OCR. 2. Select the zone. 3. Paste the result where you want.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
101 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Workflow & Planning
- Adobe Acrobat: PDF edit, convert, sign tools343,000,000 users
- Application Launcher For Drive (by Google)98,000,000 users
- AdBlock — block ads across the web65,000,000 users
- Chrome Remote Desktop41,000,000 users
- Adblock Plus - free ad blocker40,000,000 users