Chrome Web StoreCaution required
Suspicious in code review
Our reviewer found behaviour consistent with malware, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
1 high-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Smart Sidebar: Chat GPT, Claude & DeepSeek, used by 400,000 people, is rated caution by Extension Auditor. Our code review reported 2 findings (1 high, 1 medium), led by other. Its permissions mean it can read and change data on all websites and can inject scripts into pages.
Key findings
- High
Other
The bundled manifest does not match the published CWS manifest summary: the live listing declares an additional `unlimitedStorage` permission and an entirely different `web_accessible_resources` hash list (none of the ~50 hashed asset names overlap, and the content script's import target is absent from the published list). The build under review is therefore not the build being served to the 400,000 users, so no code-level clearance of this analysed ZIP can be transferred to the published extension. For an extension carrying an active IoC listing for stealing chats, this divergence is the classic shape of a delayed-malicious or divergent published build.
- Medium
Other
Every extension update force-opens a tab to a [domain withheld] short link, and the same link is registered as the uninstall URL, so it is also fetched with the user's browser identity when they remove the extension. Routing both through a link shortener means the actual destination is server-controlled and can be changed after review without shipping a new version — it cannot be audited from the package, and it is a standard channel for redirects or landing pages. Combined with user reviews reporting unexpected third-party charges and misleading OpenAI-aligned branding, this is a deliberately opaque, publisher-controlled navigation sink rather than an incidental feedback link.
Analyst notes
The bundle supplied is only ~50 files (~1 MB) against the ML evidence's 2,694 files / 15.9 MB, and both actual entry points are missing: the <all_urls> content script does nothing but dynamically import, and:1 imports — neither file exists in the extract, so the code that would contain the chat-stealing behaviour described in the SoCRadar IoC note was not available to review and nothing I read contradicts that report. What I can verify is adverse: the bundled manifest does not match the live CWS manifest (missing unlimitedStorage, a completely different web_accessible_resources hash list that does not include 1b78d5db…), so the analysed build is not the published build; opens an opaque [domain withheld] on every update and registers it as the uninstall URL, hiding the real destination from review while user reviews report surprise third-party charges; and the bundled app code belongs to [domain withheld] (externally_connectable to *.[domain withheld] and *.[domain withheld]) while the listing publisher's domains are [domain withheld] / [domain withheld], so [domain withheld] is not a first-party destination for this publisher. The permhash cluster ( flagged) and the IoC note corroborate suspicion; chrome-stats' low likelihood score and the trusted-publisher badge contradict it, but both are opinions of the same manifest rather than code evidence. I am withholding likely_malicious only because the payload files were not provided.
Smart Sidebar: Chat GPT, Claude & DeepSeek Chrome extension security report
ID: fnmihdojmnkclgjpcoonokmkhjpjechg
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Chat GPT for Chrome with Claude & DeepSeek
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
- 1 high
- 1 medium
The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.
1 high-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Supercharge Your Browser with the ChatGPT Powered Browser Extension with GPT-5, Claude Sonnet & DeepSeek AI
Read the publisher’s full description
🚀 Chat GPT extension, powered by AITOPIA sidebar with GPT-5, Claude Sonnet 4, Gemini 2.5 Flash and DeepSeek AI models, designed to boost your workflow with the power of AI agents. Whether you’re browsing websites, reading, or writing articles, blog posts, or even watching YouTube videos, Chat GPT is your intelligent assistant that seamlessly integrates into your browsing experience. 🧠 Find the best AI Agent for your needs at the AI Agent Marketplace and save hundreds of hours, achieving better results in your daily tasks. 🌟 Now featuring OpenAI’s latest reasoning models, including o1-mini and 01-preview, as well as DeepSeek for even more powerful capabilities! Chat GPT with GPT-5, Claude 3.5, and Gemini is here to revolutionize how you browse and work on your Google Chrome browser. 🖥️ Upload your PDFs or other documents, analyze them in depth, and leverage GPT-3.5, GPT-4o, and Gemini for better understanding and insights. The addition of GPT-4o Vision also allows for the analysis of charts, graphs, and other images. 🌍 With the Web Access feature, you’re no longer limited by GPT cut-off dates, and you can access real-time data. This AI extension provides all text, image, voice, and video AI tools and language models in one accessible place. 📍 Features and Advantages: Access all Language, Image, Sound & Video Models all in one place: OpenAI's Chat GPT-5, o1 mini & o1 preview, GPT-4o & GPT-4o mini, Dall-E 3 Anthropic's Claude 3.5 Sonnet, Haiku & Opus Google's Gemini 1.5 Pro & Flash Facebook Meta's Llama 3.2 70B & 405B Stability AI's SDXL, SD3 & SD3 Large Turbo Easily accessed from any browser page, integrated with an easy-to-use interface. 📍 Powerful AI Models with Extended Skills: Web Access: With Web Access, you're no longer limited by GPT cut-off dates. Now you can retrieve and use real-time data. Group Chat: Utilize multiple AI models simultaneously in a single chat to compare responses in real-time. GPT-4o Vision: Analyze images, graphs, and charts with ease, extracting detailed insights for clearer understanding. 📍 AI Agent Marketplace: AI Agent Marketplace: Discover and select the best AI Agent for you and get your tasks done efficiently. AI Agent Creator: Easily create your own custom agents using knowledge bases and skillsets with popular frameworks. 📍 File Handling: Chat with PDFs or any file directly from the GPT-4o conversation page for easy document analysis. Chat with images: GPT-4o Vision helps you chat about images, understand graphs, and extract text from visual content. 📍 Universal Assistance: Works across any webpage for summarization, translation, explanation, rewriting, grammar checking, code explanation, and much more. Google Search Integration: Get quick GPT-4o replies right next to search results from Google, Yahoo, Baidu, DuckDuckGo, Yandex, and more. You can start a conversation with GPT instantly after receiving an answer. 📍 AI Image Generation: Text-to-Image: Transform your words into visuals. Reference Images: Use an existing image to create new ones based on your prompts. Background Remover and Swapper: Remove or change backgrounds easily. Upscaling: Enhance images up to 4 times their original size for higher quality. Models available from Dall-E 3, Stability SDXL, and SD3 Turbo. 📍 Full Screen & WebApp Features: Expand to Full Screen & WebApp for a more comfortable viewing experience when working with large files or images. 📍 Reading Assistance: Quick Lookup: Use the context menu to quickly explain, brainstorm, outline, or translate text. Article Summary Generator: Automatically summarize articles with just a click. Language Translator: Translate entire pages or selected text into 50+ languages. 📍 Writing Assistance: Contextual Help: Get real-time writing assistance for emails, blog posts, social media, and more. Rewording Tool: Improve your writing, avoid plagiarism, and make your content more unique. Tone Changer: Change your writing tone to be more friendly, professional, or casual. Sentence Improvement: Expand, condense, or refine sentences for clarity and flow. 📍 AI Email Reply Assistant: Quick Email Lookup: The AI Reply button scrapes email content to give you a quick summary, key points, and reply suggestions. Easy AI Reply: Choose a suggested reply, and AI generates your email response in seconds. 📍 AI Website Helper Agents: YouTube Summaries: Easily access video summaries, key points, and timestamps to optimize your video-watching time. Introducing the enhanced ChatGPT Extension—now more powerful and intuitive! 🎉 The new version allows for seamless file uploading and processing. It’s your go-to solution for managing PDFs, Word documents, and Excel files directly in your browser. With the ability to unzip files, extract text, and analyze content, you’ll find new ways to manage your documents and boost productivity. 💻 Access via Chrome Browser: Easily accessible from your browser's extension popup—no need to visit separate websites or applications. Dark Mode: Enjoy a more comfortable experience with the option to switch to dark mode, reducing eye strain, especially in low-light settings. 📋 Clipboard Copy Option: Quickly copy text from conversations to your clipboard for easy pasting into other applications or documents. 🌍 Enhanced Web Search: GPT-3.5 & GPT-4o work alongside popular search engines like Google, Yahoo, Baidu, Bing, DuckDuckGo, and more, providing detailed insights alongside search results. With this Chat GPT extension, you'll find smarter ways to interact with text, images, and files, transforming the way you work and browse online. Don’t wait—install the Chat GPT extension today and revolutionize your workflow with these powerful AI tools. ChatGPT Login: https://chat.openai.com/auth/login ⚠️ This extensionand AITOPIA are independent third-party AI services, not affiliated with OpenAI and ChatGPT!
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
1 high-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Tools
- 迅雷下载支持80,000,000 users
- Claude18,000,000 users
- Passlit Openbook10,000,000 users
- Zotero Connector9,000,000 users
- WPS PDF - Read, Edit, Fill, Convert, and AI Chat PDF with Ease8,000,000 users