Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: ChatGPT App

CRITICAL RISKRemoved from Chrome Web Store

ChatGPT App

ID: lbneaaedflankmgmfbmaplggbmjjmbae

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.4.2

Size

0.21 MB

Rating

4.6/5

Reviews

Users

8,000

Type

Extension

Updated

Jan 11, 2025

Publisher Contextual Analysis

Author: ChatGPT AppView Profile
Privacy: Privacy Policy
MX records exist: No
Domain exists: No
Is disposable: No
Is role-based: Yes
Mailbox exists: No

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

9,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Bring AI power to your browser with the ChatGPT App!

ChatGPT App lets you tap into the power of OpenAI's language model without leaving the website you are visiting. With the ChatGPT App, you can get instant and helpful responses to inquiries with a click on the button in your browser's toolbar. This powerful extension helps you save time and effort by providing natural and human-like answers to your questions. ChatGPT App seamlessly integrates with all popular browsers, including Google Chrome, Microsoft Edge, and Firefox. You'll never have to switch between multiple tabs or windows again. You'll always have access to the latest and most powerful language models with support for all popular OpenAI APIs, including GPT-3.5-Turbo, GPT-3, and GPT-4. This feature enables you to get helpful responses to inquiries while browsing any website, allowing you to get the information you need without leaving the page you're on. ChatGPT App makes it easy to chat with ChatGPT directly from the extension and ask questions in a natural and human-like way. ChatGPT App also features markdown rendering, code highlighting, and dark mode, allowing you to customize the extension to your liking. You can even provide feedback to improve ChatGPT and use custom trigger mode. With ChatGPT App, you can now access the power of ChatGPT anywhere on the web, making it an essential tool for anyone looking to get helpful responses to their inquiries. Using ChatGPT App is easy. Log in to https://chat.openai.com, install the extension, and chat with ChatGPT directly from your search engine results page. If you encounter any issues, report a bug in the review section of the extension's page. Please note that the ChatGPT App doesn't support or endorse using other ChatGPT extensions in parallel. Make sure to uninstall all other ChatGPT extensions before installing the ChatGPT App.

User Growth

Showing data from Aug 20, 2023 to Aug 27, 2024

Versions

No change in user count

Compared to 3 months ago

20 versions released in this period

Rating Count

Total: 78 ratings

Average Rating

Current: 4.65 / 5.0+4.65

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High3

Medium3

Low0

Versions scanned

Showing 1 of 25 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.2 Code review	9

Extension Version	Code Review Findings
1.1.2	9

Files with findings

4 distinct paths — top paths by unique finding count:

static/js/safe-browsing.js6
blueBackground.js1
index.html1
update-conf.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	static/js/safe-browsing.js (line 5139)	The bundled 'safe-browsing' module is wired to two third-party endpoints — `https://id.sclpfybn.com` and `https://cs.sclpfybn.com/api/rest/v2` — under FULL_NAVIGATION mode with distributor/partner/instance IDs (83/81/…	1.1.2
2	Data Exfiltration	critical	static/js/safe-browsing.js (line 909)	The HttpClient POSTs zlib-compressed `application/octet-stream` payloads — containing the visited URL, page title, referrer, headers and a persistent user key — to `${apiUrl}/secure/urls/checkSafety` and `/secure/urls…	1.1.2
3	Unauthorized Data Collection	critical	static/js/safe-browsing.js (line 1825)	Hooks every webRequest, webNavigation, and tab lifecycle event for `https:///` and `http:///` (filter `M` defined two lines above as `urls: ["https:///", "http:///"], types: ["main_frame", "sub_frame"]`), then…	1.1.2
4	Remote Code Loading	high	static/js/safe-browsing.js (line 2730)	Periodically fetches a remote `exclusions` ruleset from `https://id.sclpfybn.com/api/privacy/data/rules/exclusions` (every 720 minutes) and applies it as URL/title regex transforms before exfiltration. Pulling server-…	1.1.2
5	Tracking	high	static/js/safe-browsing.js (line 2484)	Generates a 22-character random `panalyticsid` and persists it across THREE channels — `localStorage`, an HTTP cache entry at `/api/identity/cache`, and a credentialed cookie at `/api/identity/cookie` — and replays it…	1.1.2
6	Unauthorized Data Collection	high	static/js/safe-browsing.js (line 1017)	Uses `chrome.scripting.executeScript` to inject into arbitrary tabs and scrape `document.title` and `document.referrer` from the page, which is then attached to the navigation payload sent to the third-party server. C…	1.1.2
7	Obfuscation	medium	index.html (line 1)	The extension ships a bundled React app whose `<title>` is `Web for WhatsApp` despite the extension being marketed as a ChatGPT helper — and it ships a `safe-browsing.js` SDK alongside the same React bundle. This is t…	1.1.2
8	Other	medium	update-conf.js (line 1)	On uninstall, the extension drives users to a different Chrome Web Store extension (`egokoghkkmcnnemgcaadjhdihpceopkn` — "ChatGPT Google Assistant"), which is a typical affiliate/replacement-extension funnel used by e…	1.1.2
9	Other	medium	blueBackground.js (line 5)	Forces a tab open to `chatgeniusextension.com/thank-you/` on every install AND every silent auto-update — opening tabs on `update` (rather than only `install`) is abusive: each background update from the Web Store wil…	1.1.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


chatbuddy.info	/chat	https://chatbuddy.info/chat
www.extensions-hub.com	/partners/updated/	https://www.extensions-hub.com/partners/updated/?name=ChatGPT+App&propRef=ChatGPT-App
chat.openai.com	-	https://chat.openai.com/
chat.openai.com	//	https://chat.openai.com/\
chromewebstore.google.com	/detail/chatgpt-app/lbneaaedflankmgmfbmaplggbmjjmbae/reviews	https://chromewebstore.google.com/detail/chatgpt-app/lbneaaedflankmgmfbmaplggbmjjmbae/reviews
www.chatgptbuddy.com	-	https://www.chatgptbuddy.com/
chrome.google.com	/webstore/detail/chatgenius-your-chatgpt-a/lbneaaedflankmgmfbmaplggbmjjmbae/reviews	https://chrome.google.com/webstore/detail/chatgenius-your-chatgpt-a/lbneaaedflankmgmfbmaplggbmjjmbae/reviews
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
chat.openai.com	/*	https://chat.openai.com/*

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.1 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

超实用

LINLIN ZHANG·20 Feb 2025

And now it's time to dev!!

Jay Architect·21 Dec 2024

Love This Thing!

Jason Smith·21 Dec 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

ChatGPT App

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 25 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating