Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: ChatGPT For Chrome - ChatGPT assistant

CRITICAL RISKRemoved from Chrome Web Store

ChatGPT For Chrome - ChatGPT assistant

ID: coegmjlpjblmfpcnleenkhggdebdcpho

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.0.0

Size

6.33 MB

Rating

4.7/5

Reviews

Users

10,520

Type

Extension

Updated

Feb 6, 2023

Publisher Contextual Analysis

Author: CHATGPT AssistantView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

10,520

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Use ChatGPT in search engines, to write emails, and on any website

The ultimate Chrome extension for ChatGPT! - Automatically search ChatGPT in Google, Bing, DuckDuckGo, and Brave - Code syntax highlighting - ChatGPT is available as a popup and standalone page - Right click to send selected text to ChatGPT as a prompt - Use ChatGPT from the browser's omnibar - Reuse previously submitted prompts - Configure how the assistant sends prompts

User Growth

Showing data from Feb 07, 2023 to Feb 14, 2023

Versions

No change in user count

Compared to 7 days ago

1 version released in this period

Rating Count

Total: 39 ratings+39 (0%)

Average Rating

Current: 4.69 / 5.0+4.69

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium3

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0 Code review	5

Extension Version	Code Review Findings
1.0.0	5

Files with findings

3 distinct paths — top paths by unique finding count:

manifest.json2
static/scripts/ga.js2
popup.c87c89f4.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	high	manifest.json (line 23)	Manifest requests an aggressive permission set (cookies, declarativeNetRequest, declarativeNetRequestWithHostAccess, tabs, <all_urls>) and injects a content script into every URL — far beyond what a ChatGPT iframe pop…	1.0.0
2	Tracking	high	static/scripts/ga.js (line 1)	The extension bundles a full ~14,549-line copy of Google Tag Manager / gtag.js locally (property G-62P3FH3XKV), instrumenting page_view, scroll, site_search (q,s,search,query,keyword), download and outbound_click hits…	1.0.0
3	Data Exfiltration	medium	static/scripts/ga.js (line 2505)	Multiple navigator.sendBeacon() calls deliver tracking payloads to Google's collection endpoints (e.g. googletagmanager.com/a?id=, merchant-center-analytics.goog/mc/collect, ads/ga-audiences). sendBeacon is preferred …	1.0.0
4	Other	medium	manifest.json (line 23)	The manifest references background.03d335d1.js and content-script.841a4bae.js, but neither file is present in the analysis bundle — only the React popup, two HTML stubs, and a bundled gtag.js were extracted. The most …	1.0.0
5	Unauthorized Data Collection	medium	popup.c87c89f4.js (line 49)	The popup unconditionally initializes Google Analytics and forwards a TRACK_EVENT message to the (missing) background service-worker on every popup open, including window.location.hash as page_path. URL fragments ofte…	1.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fb.me	/use-check-prop-types	http://fb.me/use-check-prop-types
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
jedwatson.github.io	/classnames	http://jedwatson.github.io/classnames
chat.openai.com	/chat	https://chat.openai.com/chat
chrome.google.com	/webstore/detail/chatgpt-assistant/kldepdcdedfibmjnggmolhffdddbphjg/reviews	https://chrome.google.com/webstore/detail/chatgpt-assistant/kldepdcdedfibmjnggmolhffdddbphjg/reviews
github.com	/msfrisbie/chat-gpt-assistant/issues	https://github.com/msfrisbie/chat-gpt-assistant/issues
npms.io	/search	https://npms.io/search?q=ponyfill.
reactjs.org	/docs/error-decoder.html	https://reactjs.org/docs/error-decoder.html?invariant=
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/XML/1998/namespace	http://www.w3.org/XML/1998/namespace

Showing 1 to 10 of 80 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


103.0.0.0	IPv4	-
2.1.0.2	IPv4	-
107.0.0.0	IPv4	-

4.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

doesn't work. Have a "Please enable Cookies and reload the page." message in the extension. Cookies ARE enabled. Also tried turning adblocker off.

Benedict Harris·13 Feb 2023

chat.openai.com is blocked chat.openai.com refused to connect. ERR_BLOCKED_BY_RESPONSE

Juan Castaneda·13 Feb 2023

One best creations of Open AI highly recommended for using.

khizar ahsan

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

ChatGPT For Chrome - ChatGPT assistant

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews