Chrome Web Store
4Versions
1Code reviewed

Caution required

Suspicious in code review

Our reviewer found behaviour consistent with malware, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

1 high-severity finding in this extension’s code

1 high
7 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

DeepSeek v4, used by 9,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by network interception. Its permissions mean it can read and change data on all websites.

Key findings

  • High

    Network Interception

    The declarativeNetRequest rule strips CSP, X-Frame-Options, frame-ancestors, and X-Content-Type-Options security headers from ALL main_frame and sub_frame HTTP responses with no domain filter — meaning every website the user visits has its security headers silently removed. The stated purpose is to allow [domain withheld] to be loaded inside the extension's iframe, but the correct scoping would restrict the condition to requestDomains: ['[domain withheld]']; the absence of this filter is either a serious implementation error or an intentional weakening of browser security protections globally. Removing CSP and X-Frame-Options from arbitrary third-party sites can enable XSS and clickjacking attacks that those sites' own headers were specifically preventing.

Analyst notes

The extension is functionally a legitimate DeepSeek AI sidebar wrapper — all network communication is with [domain withheld], there is no data exfiltration, and the content script only runs on [domain withheld] as declared. However, the declarativeNetRequest rule (lines 92–133) strips CSP, X-Frame-Options, frame-ancestors, and X-Content-Type-Options response headers from ALL main_frame and sub_frame resources globally — no requestDomains or urlFilter limits it to [domain withheld] — weakening browser security protections across every website the user visits. The ML score (0.09) and chrome-stats likelihood () both suggest low risk, which corroborates the largely benign code, but the publisher's 40% malicious rate on other extensions and the 50% permhash cluster malicious rate provide meaningful corroborating signals that raise suspicion above likely_benign.

DeepSeek v4

DeepSeek v4 Chrome extension security report

ID: cikejppmphinklkgigpihnbiemmpgpbm

Extension Info & Metadata

Status
Active
Version
1.3
Size
0.19 MB
Rating
4.9/5
Reviews
396
Users
9,000
Type
Extension
Updated
May 2, 2026
Category
Tools
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
6extensions
5 no longer listed

Publisher Contextual Analysis

Trusted
Author
SunMorohon
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
6
Active
1
Obsolete
5
Listed
6
Unlisted
0
Users
16,523

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
declarativeNetRequestFeedback
Permission
Medium
This permission provides network request modification logs. Rated Medium because it can monitor network request changes and debug traffic modifications.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
commands
Permission
Unknown
No classification available for this permission.
  • 1 high

The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.

1 high-severity finding in this extension’s code

1 high
7 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

DeepSeek v3 unlock solutions with DeepSeek AI. Explore DeepSeek Coder to improve workflows with DeepSeek chat.

Read the publisher’s full description

This AI model is the future of artificial intelligence, offering unparalleled tools for developers, researchers, and businesses to explore the limitless potential of AI. DeepSeek v3 introduces groundbreaking improvements that elevate AI capabilities to new heights. 🌟 Key Features of this extension ▸ Advanced Multimodal Capabilities This extension integrates multimodal AI systems, enabling seamless processing of text, vision, and audio data. From chatbots to image analysis, the platform ensures a unified approach to data interpretation. Chat capabilities with DeepSeek chat set a new standard for AI communication. ▸ Innovative Coding Solutions The DeepSeek coder tool is a game-changer for developers, providing an intuitive framework to build, debug, and optimize applications. The integration of DeepSeek coder v3 enables developers to work faster and smarter. ▸ Scalable AI Models The Chrome DeepSeek AI model is designed for performance, scalability, and precision, making it ideal for applications ranging from healthcare to finance. With LLM DeepSeek, large language models are now more accessible and efficient than ever. ▸ Cutting-Edge Chat Solutions With DeepSeek chat, experience state-of-the-art conversational AI. Whether you're creating customer support systems or personal assistants, this extension ensures smooth and intelligent communication. The DeepSeek model is highly versatile, ensuring precision and reliability in diverse applications. ▸ Real-Time Analytics and Monitoring Stay informed with the DeepSeek status dashboard, which provides live updates on system performance, resource utilization, and ongoing tasks. The dashboard offers transparency and actionable insights for optimized performance. 🔄 Seamless Integration and Downloads ✔️ The DeepSeek platform offers a flexible ecosystem where tools and frameworks are modular and easy to use. ✔️ Download the latest version, use this AI model, to get started with powerful AI tools. ✔️ Explore the DeepSeek app, designed for mobile and desktop use, to access AI capabilities on the go. 🚀 Why Choose this extension? 1️⃣ Open-Source Excellence As an open-source DeepSeek project, the platform fosters innovation and collaboration among a global community of developers. This extension promotes transparency and shared knowledge. 2️⃣ Exploring the Unknown Venture DeepSeek Chrome Extension with tools that allow for experimentation and discovery in uncharted AI territories. 3️⃣ Multimodal AI Leadership This AI is a pioneer in multimodal technologies, merging different data types for holistic AI insights. 4️⃣ Unmatched Scalability From small startups to large enterprises, this extension can scale to meet your needs, ensuring flexibility and growth. 5️⃣ Enhanced Productivity for Developers With tools like the DeepSeek coder, building applications has never been faster or more efficient. 📈 Applications of this extension • Finance and Analytics: Use DeepSeek stock tools for advanced financial modeling and predictions. • Healthcare: Leverage the power of the DeepSeek AI model for diagnostics and personalized medicine. • Education: Develop interactive learning solutions with DeepSeek GPT capabilities. • E-commerce: Build intelligent recommendation systems using DeepSeek multimodal solutions. • Communication: Create robust chat systems with DeepSeek chat technology. 💎 Highlights of this extension ➤ Improved system performance with optimized frameworks. ➤ Enhanced LLM DeepSeek for better natural language understanding. ➤ DeepSeek download options tailored for different platforms, including Windows, macOS, and Linux. ➤ DeepSeek R1 model integration for faster real-time processing. 🌐 DeepSeek: Always Online The DeepSeek online service offers 24/7 access to AI tools, ensuring uninterrupted productivity for developers and businesses worldwide. With its robust infrastructure, this extension maintains high availability and lightning-fast responses. 🎉 Get Started with powerful AI model! Ready to explore the future of AI? Download this extension or try the DeepSeek app to see how this revolutionary platform can transform your workflows. Whether you're building intelligent applications, analyzing complex data, or designing AI-powered chat systems, this extension has the tools to make your vision a reality. 🧐 FAQs About this AI model ✅ What is DeepSeek? This is an AI platform offering tools for multimodal processing, coding, and data analysis. Join the global community of developers and innovators who rely on this AI model to push the boundaries of what's possible. ✅ How do I find this AI model download? Just use this DeepSeek extension. ✅ What is DeepSeek GPT? It is an advanced text-generation model integrated into the AI platform for creating dynamic content.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
7

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

1 high-severity finding in this extension’s code

1 high
7 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.3
Latest
0.19 MBCaution0
8a1849027fe90ede652e99dee89626118f6b56c0d9f06961d2194f9142c5fc0e
1.0
0.17 MBNot scanned—
2a970a7f2e9eb60b53c9789b3ea9f23501f697b811a7e8da2ce94730779b3243
1.2
0.19 MBNot scanned—
8a1849027fe90ede652e99dee89626118f6b56c0d9f06961d2194f9142c5fc0e
1.1
0.17 MBNot scanned—
2a970a7f2e9eb60b53c9789b3ea9f23501f697b811a7e8da2ce94730779b3243
Showing 1 to 4 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

More from SunMorohon

Popular in Tools

Store rankings

Where this extension appears in store category, collection and keyword rankings.