Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Google ChatGPT: Google Search with ChatGPT

CRITICAL RISKRemoved from Chrome Web Store

Google ChatGPT: Google Search with ChatGPT

ID: egokoghkkmcnnemgcaadjhdihpceopkn

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.4.0

Size

1.87 MB

Rating

4.5/5

Reviews

Users

84,518

Type

Extension

Updated

Jan 25, 2024

Publisher Contextual Analysis

Trusted

Author: gptsynthdialogView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

84,518

Email Change History

1 change

Jan 7, 2024

Domain changed

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Show ChatGPT responses next to Google Search results. Access ChatGPT with just one click

With this Google ChatGPT extension, you get instant ChatGPT responses right next to your Google Search results and can access ChatGPT with a single click wherever you browse. Using Google ChatGPT is super easy! Just type your question in the search bar, and ChatGPT will immediately give you helpful answers and suggestions. Want to learn new things or ask interesting questions in any language? ChatGPT is here to help! It makes searching online more fun and interactive. Discover a world of knowledge and fun with ChatGPT by your side! To start using ChatGPT for free, you can create an account here: https://chat.openai.com/ For more information, visit: https://openai.com/chatgpt

User Growth

Showing data from Apr 03, 2023 to Feb 06, 2024

Versions

+28.93%(+18,967 users)

Compared to 3 months ago

17 versions released in this period

Rating Count

Total: 33 ratings+1 (3%)

Average Rating

Current: 4.52 / 5.0+4.52

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High3

Medium2

Low1

Versions scanned

Showing 1 of 17 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.5 Code review	7

Extension Version	Code Review Findings
1.1.5	7

Files with findings

5 distinct paths — top paths by unique finding count:

javascript/worker.js3
javascript/content.js1
javascript/popup.js1
manifest.json1
popup.html1

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	critical	manifest.json (line 8)	The content_scripts matches array enumerates dozens of specific search-engine URLs and then ends with the catch-all pattern `:///*`, which causes content.js to be injected into EVERY http(s) page the user visits. Th…	1.1.5
2	Code Injection	high	javascript/worker.js (line 1643)	The worker uses `chrome.scripting.executeScript` to inject a function into a ChatGPT tab it spawned, which programmatically clicks DOM elements and writes user-selected page text into the ChatGPT textarea, then auto-s…	1.1.5
3	Credential Theft	high	javascript/worker.js (line 1474)	The background service worker harvests the signed-in user's ChatGPT session access token from `chat.openai.com/api/auth/session` and caches it in memory. The bearer token is then attached to arbitrary subsequent backe…	1.1.5
4	Remote Code Loading	high	popup.html (line 34)	The extension popup embeds a 400x18 iframe pointing at the third-party domain `chatgpt-google.site` on every popup open. The tiny dimensions indicate it is not a user-facing UI but a covert channel — the remote page c…	1.1.5
5	Tracking	medium	javascript/worker.js (line 1689)	On install the background worker silently opens a tab to the operator-controlled domain `chatgpt-google.site/thank-you/`. This provides an uncontested browser fingerprinting / tracking beacon at install time (IP, UA, …	1.1.5
6	Tracking	medium	javascript/content.js (line 14478)	The content script loads an image asset from the operator-controlled third-party domain `chatgpt-google.site`. Because this runs on every page the content script is injected into (which, per the manifest, is effective…	1.1.5
7	Code Injection	low	javascript/popup.js (line 1047)	popup.js assigns dynamically-built HTML (including an iframe to chat.openai.com) directly via `innerHTML`. The template string is constructed from control-flow state derived from a remote fetch response; although the …	1.1.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

248

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/photoshop/1.0/	http://ns.adobe.com/photoshop/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceEvent	http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
ns.adobe.com	/tiff/1.0/	http://ns.adobe.com/tiff/1.0/
ns.adobe.com	/exif/1.0/	http://ns.adobe.com/exif/1.0/
chatgpt-google.site	/chatgpt-on-google-consent/	https://chatgpt-google.site/chatgpt-on-google-consent/

Showing 1 to 10 of 250 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


38.43.65.78	IPv4	-

4.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Very useful ! I am glad that Google has established a partnership with Open AI! I think it will help as well for Gmail. Dan R.

Dan Roman·5 Feb 2024

thanks …excellent

Abd-Elfattah Elfaham·5 Feb 2024

De entrada, aprecio una mejora en eficiencia y efectividad de esta versión sobre la app convencional; por lo que se entiende y se evidencia G-ChatGPT, podrá dejar en el camino a las no pocas app que compiten en el mercado de la IA generativa, sobre todo, por la frivolidad y la nula intención por la búsqueda de la verdad, la información formativa y acrecentar el conocimiento del usuario que caracterizan desde su lanzamiento a las APP de IA generativas que pululan en el ecosistema digital. Honrosas excepciones como la interfaz propia de OpenAI y ahora Google ChatGPT aportan seriedad y valor digital al servicio, claro, sin dar la espalda al entretenimiento.

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Google ChatGPT: Google Search with ChatGPT

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Email Change History

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 17 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating