Chrome Web StoreCaution required
Suspicious in code review (v2.4.4)
Our reviewer found behaviour consistent with malware in version 2.4.4, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
29 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
极客侧边栏-免费DeepSeek丨书签云同步, used by 10,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by remote code loading. Its permissions mean it can read and change data on all websites and can inject scripts into pages.
Key findings
- High
Remote Code Loading
`oe` (the extension's open-URL helper) diverts any URL beginning with `javascript:` into `chrome.userScripts.register` with `matches:['*://*/*']`, then reloads the active tab so the code executes, and unregisters 2s later. For the user's own saved bookmarklets this is a legitimate feature (a dedicated `/^javascript:/` validator exists in), but passes URLs from the publisher-controlled ` ` recommendation feed into the same helper with no scheme check, so a server response can execute arbitrary JavaScript in whatever page the user is on - and in any page loaded during the 2s window, since the registration is not scoped to the one tab - bypassing Chrome Web Store review. The CWS listing declares no data collection and says nothing about running remote code, and a user clicking a recommended bookmark expects navigation, not script execution. NOTE: the supplied extract_dir contained only 50 of the 312 files and none of these chunks; they were read from /[domain withheld], whose is md5-identical to the bundle's.
Analyst notes
The extension is what it advertises - a sidebar with cloud bookmark sync, AI chat, notes, screenshot and split view - and every outbound destination in all 312 files is first-party or listing-justified ([domain withheld] with 47 endpoints mapping 1:1 to those features, plus OAuth, a Baidu search link and a mikecrm uninstall survey), with no obfuscation, no cookie or history access, and page content read only on explicit user action (the listeners in only show a summary chip; the 'web-summary' message that reads document.body.innerText is sent solely from the click handler and the keyboard command). The one real problem is a server-reachable code-execution path: routes any URL starting with 'javascript:' into chrome.userScripts.register({matches:['*://*/*'], js:[{code}]}), and hands it URLs straight from the publisher-curated response with no scheme check, so the backend can run arbitrary JS in pages on one click without a Web Store review. Signals that look corroborating are really one signal - the internal note, the permhash cluster and the 'publisher flagged malicious' flag all trace to the 2026-09-13 malext-feed import, leave-one-out is, the INVALID_DOMAIN email is a scrape artifact (' '), the publisher 'website' is a Google support URL, and chrome-stats cites a history permission the manifest does not declare - and the ML regex evidence is mostly bundler noise (the 198 JS files include CodeMirror 5 legacy language modes such as and for the advertised code feature, the fromCharCode hits are KaTeX codepoints, tokenizers and one ArrayBuffer-to-base64 upload step, the hits in are Vue runtime-dom, the document.cookie hits in:1155-1166 are axios's XSRF helper, and contain no base64 at all), so this verdict rests on the userScripts path alone, not on the ML score. Bundled and published manifests match exactly, so there is no delayed-malicious divergence; a separate hygiene issue not logged as a finding is that relays GOOGLE_AUTH_CODE window messages from any origin.
极客侧边栏-免费DeepSeek丨书签云同步 Chrome extension security report
ID: gjkfnalkblnjkalnipilmaacibikciin
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- 极客侧边栏
- Privacy
- Privacy Policy
- MX records exist
- No
- Domain exists
- No
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- No
- Website
- Visit
Email Change History
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
29 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Write smarter with ChatGPT, Claude, Grok & DeepSeek.All-in-one AI, smart bookmarks,and tools—clean up links, check pages,…
Read the publisher’s full description
Geek Sidebar: Empowered by World-Class AI & Cloud Bookmark Management | A powerful browser sidebar extension offering all-in-one AI assistance + cloud bookmark management + efficiency tools. Turns your sidebar into a super workspace! 🧠 The Ultimate Sidebar for AI: Say goodbye to constant tab-switching! • Using ChatGPT, Claude, DeepSeek-R1, and Grok for Efficient Office Work . • Web Screenshot: Area capture + OCR text extraction + screenshot translation + content summarization. • File Parsing: Supports diverse document and image formats with drag-and-drop batch processing. • AI Image Generation: Access to 4o-Image and Flux, with editing features for endless creativity. • Web Search: Context-aware search intent recognition to filter irrelevant results. • Code Execution: Run AI-generated HTML live — WYSIWYG results. • Webpage Summary/Q&A: Summarize lengthy articles in seconds or ask questions directly about open pages. 📂 Cloud Bookmark Manager • Cross-Browser Sync: Supports Chrome, Edge, Firefox. View cloud bookmarks anywhere. • AI Auto-Categorization: Bookmarks sorted automatically — collect and organize instantly. • Drag-&-Drop Sorting: Intuitive organization like arranging desktop icons. • Local Import: One-click migration from browser bookmarks. • Duplicate Detection: Visualize duplicates and batch delete by time rules. • Link Validation: Detect invalid URLs efficiently with multi-threading. • Built-in Bookmark Library: Discover hundreds of premium websites across industries — save directly. 🚀 Efficiency Toolkit • Sidebar Web Apps: Load compatible websites directly into sidebar for split-screen reading. • Cloud Notes: Take instant notes with sync — never lose them! 💡 Why Choose Us? • Free to use • Deeply optimized for sidebar workflows • Enterprise-grade data encryption • We appreciate your feedback & ideas Start now — turn any webpage into a productivity tool! Official Website: https://www.geeksidebar.com Feedback & Suggestions: help@geeksidebar.com
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
29 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
Popular in Tools
- Montara Chrome Extension639,000,000 users
- 迅雷下载支持88,000,000 users
- Passlit Openbook10,000,000 users
- Zotero Connector9,000,000 users
- Browsec VPN - Free VPN for Chrome8,000,000 users