Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: ChatGPT 4

CRITICAL RISKRemoved from Chrome Web Store

ChatGPT 4

ID: njdepodpfikogbbmjdbebneajdekhiai

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.1.6

Size

0.03 MB

Rating

4.2/5

Reviews

111

Users

20,000

Type

Extension

Updated

Jan 11, 2025

Publisher Contextual Analysis

Author: https://chatgptsidebar.proView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

20,000

Email Change History

1 change

Mar 5, 2024

Domain changed

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

ChatGPT 4: Engage, Discover, Automate, and Explore AI in one streamlined platform.

Open Chat GPT in a standalone window with ChatGPT 4. ChatGPT 4 is a revolutionary AI tool that enriches chat interactions, making them more engaging and efficient. This enhancement boosts Chat GPT-4 functionality, providing a customizable and interactive experience that adapts to your preferences. It seamlessly integrates into existing workflows, allowing you to tap into the full potential of AI in your conversations. Key Points: ChatGPT 4 enriches your chat experience. It makes conversations with AI more captivating. Tailor AI Chat to meet your specific needs. Easily incorporate it into your AI setup. Maximize Chat GPT capabilities for improved AI interactions. FAQs: What is ChatGPT 4? A cutting-edge AI tool that elevates chat experiences with enhanced functionality. How does it enhance my AI experience? It makes interactions more intuitive and efficient, leveraging Chat GPT's advanced features. Can it be integrated into my workflows? Yes, its ease of integration makes it ideal for developers and businesses alike. Is it customizable? Allowing for personalized AI conversations tailored to your preferences. How does it improve Chat GPT-4? By extending its capabilities for more dynamic and versatile AI interactions. Discover the transformative power of ChatGPT 4 for your AI conversations! For more information, visit OpenAI's website: https://openai.com/gpt-4 Chat GPT 3.5 is free to use. Chat GPT 4 (GPT-4) offers better functionalities and is paid.

User Growth

Showing data from Oct 03, 2023 to Oct 01, 2024

Versions

No change in user count

Compared to 4 months ago

11 versions released in this period

Rating Count

Total: 103 ratings

Average Rating

Current: 4.14 / 5.0+4.14

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High4

Medium2

Low1

Versions scanned

Showing 1 of 14 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0 Code review	10

Extension Version	Code Review Findings
1.0.0	10

Files with findings

5 distinct paths — top paths by unique finding count:

js/async.js3
js/content_script.js2
manifest.json2
rule.json2
js/service.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	rule.json (line 20)	declarativeNetRequest rule rewrites Content-Security-Policy to a maximally permissive value (default-src * 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' data: blob:) for sub-frames whose initiator is openai.com. This …	1.0.0
2	Obfuscation	critical	js/async.js (line 1)	Classic time-bomb / dormancy pattern: the extension records its install timestamp and only triggers injifr() (an iframe-injection routine) once 8 days (691200000 ms) have elapsed since install. This delayed activation…	1.0.0
3	Remote Code Loading	critical	js/async.js (line 15)	injifr() is called after the 8-day cutoff but the function is not defined anywhere in the shipped JS bundle, and the file it would load (ana.html) is also missing. Together these facts strongly indicate a code path th…	1.0.0
4	Network Interception	high	rule.json (line 39)	In addition to overriding CSP, the ruleset systematically strips or weakens every other browser security header (X-Frame-Options, X-Content-Type-Options, X-XSS-Protection, COEP/COOP, Permissions-Policy) on OpenAI sub-…	1.0.0
5	Phishing	high	js/content_script.js (line 150)	Inside the chat.openai.com iframe the content script intercepts clicks on 'Log in', 'Sign up', 'Upgrade to Plus' and 'Upgrade to ChatGPT Plus' buttons — i.e., authentication and payment entry points — and replaces the…	1.0.0
6	Privilege Escalation	high	manifest.json (line 31)	The extension claims <all_urls> host permission and registers an all-sites content script (js/all.js) even though its advertised purpose is a ChatGPT side panel. Combined with the time-delayed injifr() loader and broa…	1.0.0
7	Tracking	high	js/async.js (line 37)	A 1x1 invisible iframe explicitly labeled by the author as a 'tracker' (id="trck") is injected into the side panel on every load. Hidden 1px tracking iframes are a standard telemetry/analytics-exfiltration pattern; th…	1.0.0
8	Phishing	medium	js/content_script.js (line 280)	After hijacking the login/signup click, the script postMessages 'Overlay notice active' to the parent (the extension's own side panel) using wildcard origin '*'. The side panel listens for this message and triggers sh…	1.0.0
9	Unauthorized Data Collection	medium	manifest.json (line 50)	Every file in the extension is exposed as web_accessible to <all_urls>, all frames, and all other extensions (extension_ids:["*"]). This wildcard exposure is unnecessary for a sidebar UI and lets arbitrary web pages a…	1.0.0
10	Obfuscation	low	js/service.js (line 1)	The MV3 service worker uses importScripts with a chrome-extension:// URL constructed from chrome.runtime.id rather than a relative path. This is unusual and pointlessly indirect for static local scripts; combined with…	1.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


chat.openai.com	-	https://chat.openai.com
chromewebstore.google.com	/detail/chatgpt-sidebar/njdepodpfikogbbmjdbebneajdekhiai/reviews	https://chromewebstore.google.com/detail/chatgpt-sidebar/njdepodpfikogbbmjdbebneajdekhiai/reviews
chatgptbuddy.com	-	https://chatgptbuddy.com
chromewebstore.google.com	/detail/chat-gpt/fnmihdojmnkclgjpcoonokmkhjpjechg	https://chromewebstore.google.com/detail/chat-gpt/fnmihdojmnkclgjpcoonokmkhjpjechg
chatbuddy.info	/chat	https://chatbuddy.info/chat
www.extensions-hub.com	/partners/updated	https://www.extensions-hub.com/partners/updated?name=ChatGPT-4
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

What a Tool!.... Excellent inputs.

KWS EVAPORATORS PVT LTD·17 Jan 2025

جيد

دع

د عنتر عبدالعال·3 Jan 2025

goood and useful

SHAURYA GARG 2441556·18 Dec 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

ChatGPT 4

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Email Change History

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 14 Versions10

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating