Caution: Potentially Unwanted Software

This extension is flagged as potentially unwanted software and may perform undesirable actions.Extension: Bless

MEDIUM RISKStill available - exercise caution

Bless

ID: pljbjcehnhcnofmkdbjolghdcjnmekia

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

0.3.15

Size

21.72 MB

Rating

3.2/5

Reviews

902

Users

100,000

Type

Extension

Updated

May 11, 2026

Publisher Contextual Analysis

Trusted

Author: bless.networkView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

100,000

Email Change History

1 change

Nov 28, 2024

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Bless Browser Extension

Hi! Bless is the world's first shared computer. Our extension allows you to automatically and anonymously contribute spare compute power from your device to the websites, applications and services that you use, in exchange for rewards. Instead of relying upon companies like Amazon Web Services or Google Cloud, we're creating an internet that's both powered and controlled by the people that use it. Learn more about Bless at https://bless.network/#faqs

User Growth

Showing data from Nov 12, 2024 to Nov 11, 2025

Versions

-50%(-100,000 users)

Compared to 4 months ago

6 versions released in this period

Rating Count

Total: 871 ratings

Average Rating

Current: 3.23 / 5.0+3.23

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High5

Medium0

Low0

Versions scanned

Showing 1 of 12 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.3.15 Code review	7

Extension Version	Code Review Findings
0.3.15	7

Files with findings

7 distinct paths — top paths by unique finding count:

chatgpt-early-hook.js1
chatgpt-rules.json1
gemini-early-hook.js1
google-rules.json1
grok-early-hook.js1
metaai-early-hook.js1
rufus-early-hook.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	chatgpt-early-hook.js (line 100)	Intercepts fetch requests to capture ChatGPT auth tokens, device IDs, and sentinel tokens, then sends them to the parent window for exfiltration. This allows unauthorized use of the user's ChatGPT session.	0.3.15
2	Data Exfiltration	critical	metaai-early-hook.js (line 200)	Overrides WebSocket constructor to intercept Meta AI communication. Captures binary messages and allows sending prompts via EXECUTE_METAAI_PROMPT, effectively hijacking the user's Meta AI session.	0.3.15
3	Network Interception	high	chatgpt-rules.json (line 1)	Uses declarativeNetRequest to strip X-Frame-Options and Content-Security-Policy headers from ChatGPT subframes, bypassing security protections to allow iframing and covert data capture.	0.3.15
4	Network Interception	high	google-rules.json (line 1)	Strips security headers from Google subframes, enabling unauthorized iframing and potential data exfiltration.	0.3.15
5	Unauthorized Data Collection	high	gemini-early-hook.js (line 80)	Hooks XMLHttpRequest on Gemini to parse conversation responses, extract messages, and send structured conversation data (including user prompts) to the parent window via postMessage, enabling unauthorized collection o…	0.3.15
6	Unauthorized Data Collection	high	grok-early-hook.js (line 15)	Overrides fetch on Grok to capture statsigId headers and sends them to the parent window, extracting identifiable session information without consent.	0.3.15
7	Unauthorized Data Collection	high	rufus-early-hook.js (line 1)	Injects hooks into Amazon's Rufus AI service to capture CSRF tokens and conversation data, then sends them via postMessage. Also forwards API requests from offscreen frames, enabling unauthorized use of the user's Ama…	0.3.15

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

443

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.perplexity.ai	-	https://www.perplexity.ai/
webgpureport.org	-	https://webgpureport.org/
raw.githubusercontent.com	/mlc-ai/binary-mlc-llm-libs/main/web-llm-models/	https://raw.githubusercontent.com/mlc-ai/binary-mlc-llm-libs/main/web-llm-models/
huggingface.co	/mlc-ai/Llama-3.2-1B-Instruct-q4f32_1-MLC	https://huggingface.co/mlc-ai/Llama-3.2-1B-Instruct-q4f32_1-MLC
huggingface.co	/mlc-ai/Llama-3.2-1B-Instruct-q4f16_1-MLC	https://huggingface.co/mlc-ai/Llama-3.2-1B-Instruct-q4f16_1-MLC
huggingface.co	/mlc-ai/Llama-3.2-1B-Instruct-q0f32-MLC	https://huggingface.co/mlc-ai/Llama-3.2-1B-Instruct-q0f32-MLC
huggingface.co	/mlc-ai/Llama-3.2-1B-Instruct-q0f16-MLC	https://huggingface.co/mlc-ai/Llama-3.2-1B-Instruct-q0f16-MLC
huggingface.co	/mlc-ai/Llama-3.2-3B-Instruct-q4f32_1-MLC	https://huggingface.co/mlc-ai/Llama-3.2-3B-Instruct-q4f32_1-MLC
huggingface.co	/mlc-ai/Llama-3.2-3B-Instruct-q4f16_1-MLC	https://huggingface.co/mlc-ai/Llama-3.2-3B-Instruct-q4f16_1-MLC
huggingface.co	/mlc-ai/Llama-3.1-8B-Instruct-q4f32_1-MLC	https://huggingface.co/mlc-ai/Llama-3.1-8B-Instruct-q4f32_1-MLC

Showing 1 to 10 of 450 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


131.0.0.0	IPv4	-
1.1.1.1	IPv4	-
127.0.0.1	IPv4	-
198.51.100.14	IPv4	-
82.41.53.1	IPv4	-
0.0.0.0	IPv4	-
10.0.0.0	IPv4	-
100.64.0.0	IPv4	-
127.0.0.0	IPv4	-
169.254.0.0	IPv4	-
172.16.0.0	IPv4	-
192.0.0.0	IPv4	-
192.0.0.8	IPv4	-
192.0.0.9	IPv4	-
192.0.0.10	IPv4	-
192.0.0.170	IPv4	-
192.0.0.171	IPv4	-
192.0.2.0	IPv4	-
192.31.196.0	IPv4	-
192.52.193.0	IPv4	-
192.88.99.0	IPv4	-
192.168.0.0	IPv4	-
192.175.48.0	IPv4	-
198.18.0.0	IPv4	-
198.51.100.0	IPv4	-
203.0.113.0	IPv4	-
240.0.0.0	IPv4	-
255.255.255.255	IPv4	-
2.5.5.2	IPv4	-
123.123.123.123	IPv4	-
104.131.131.82	IPv4	-

Showing 1 to 31 of 40 rows

Rows per page:

3.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Jitesh Bangal·14 Jun 2026

!! WARNING !! My NEW PASSWORD was recently discovered in a data breach. I never use it anywhere except Google Chrome with a dedicated profile. Strangely, I received a notification that my password had been leaked and compromised.

Haru Doank·25 May 2026

The Bless extension is not safe from a privacy perspective. It’s not ‘malware’, but it is a data‑harvesting extension with: – excessive permissions – access to sensitive data – the ability to monitor browsing – email login – wallet linking This combination makes it high‑risk for any user who wants: – privacy – separation of wallet from browsing – protection of personal data.

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Caution: Potentially Unwanted Software

Bless

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Email Change History

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 12 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating