Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: ChatGPT for Gmail

CRITICAL RISKRemoved from Chrome Web Store

ChatGPT for Gmail

ID: nfhkknadfkkoodpcaecgpkdnbjkjhebf

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.1.1

Size

0.17 MB

Rating

2.9/5

Reviews

Users

20,000

Type

Extension

Updated

Jan 5, 2024

Publisher Contextual Analysis

Author: ChatGPT ExtensionsView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

20,297

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Display ChatGPT response as a suggestion to complete emails

A Free Open source browser extension for Gmail that completes emails for you using ChatGPT. You can write just the main context of the email and let ChatGPT add manners and conjunctions for you. Features: - Completes emails for you by a given context - Completes the subject of the email - Fixes any typos you might have - Accessible button to let ChatGPT complete the email - Can be turned on or off at any time - Support ChatGPT API key Usage: 1. Open Gmail 2. Create new email and start writing it 3. In the left side of your input text, ChatGPT for Gmail icon will appear 4. Click it and a suggestion of Chat GPT to complete your email will show on screen 5. If you chose to accept it, just click on it source code: https://github.com/dtkdt100/Chat-GPT-for-Gmail credit: https://github.com/wong2/chat-gpt-google-extension

User Growth

Showing data from Dec 29, 2022 to Dec 28, 2023

Versions

-34.93%(-10,735 users)

Compared to 3 months ago

7 versions released in this period

Rating Count

Total: 30 ratings-1 (-3%)

Average Rating

Current: 2.93 / 5.0+2.93

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low0

Versions scanned

Showing 1 of 8 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.1 Code review	4

Extension Version	Code Review Findings
1.0.1	4

Files with findings

2 distinct paths — top paths by unique finding count:

background.js2
content-script.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	high	content-script.js (line 15208)	The extension reads the entire innerHTML of the user's Gmail compose draft (`t.innerHTML`) and ships it to chat.openai.com as a 'question'. While this matches the advertised feature, it transmits potentially sensitive…	1.0.1
2	Data Exfiltration	high	background.js (line 1053)	The background script POSTs the Gmail draft body (forwarded from the content script) to chat.openai.com's undocumented `/backend-api/conversation` endpoint using the harvested session bearer token. This is the channel…	1.0.1
3	Code Injection	medium	content-script.js (line 15201)	The 'rewrite' button replaces the Gmail compose body's `innerHTML` with the raw HTML content returned from ChatGPT (`n[0].innerHTML`). The model output is rendered through Preact/markdown in `n[0]` and then injected u…	1.0.1
4	Credential Theft	medium	background.js (line 1176)	The background service worker silently extracts the user's OpenAI session bearer token by fetching `https://chat.openai.com/api/auth/session` (which returns the accessToken because the request rides on the user's logg…	1.0.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
chat.openai.com	/backend-api$%7Bt%7D%60,%7Bmethod:r,headers:%7B	https://chat.openai.com/backend-api${t}`,{method:r,headers:{
chat.openai.com	/api/auth/session	https://chat.openai.com/api/auth/session
chat.openai.com	/backend-api/conversation	https://chat.openai.com/backend-api/conversation
api.openai.com	/v1/completions	https://api.openai.com/v1/completions
wtrcgp.com	-	https://wtrcgp.com/
lodash.com	-	https://lodash.com/
openjsf.org	-	https://openjsf.org/
lodash.com	/license	https://lodash.com/license
underscorejs.org	/LICENSE	http://underscorejs.org/LICENSE

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

1.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

This extension hijacks my browser search and redirects it to search1.me

Jason Skocilich-Waymire·22 Jan 2024

The answer/replies it create is always basically the same. Does not seem to take context from previous exchanges in the message thread.. I dont get it. UI is also below proof of concept. Uninstalled after 10minutes. I should have listened to other bad reviews.

Patrick Buswell·21 Oct 2023

I downloaded the extension and it worked immediately after I refreshed Gmail. It did a great job correcting the errors in my test email! I also notice that if you click away and resubmit with the same email content repeatedly, the app starts to make the responses longer and shorter as if to guess what you want. Brilliant! Then I read all the other reviews and I was really surprised to be the first person to use the app successfully. I guess the previous comments are from the first MVP tests. Great job!

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

ChatGPT for Gmail

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 8 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating