Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: ImagePrompt - Reverse Image To Prompt

CRITICAL RISKRemoved from Chrome Web Store

ImagePrompt - Reverse Image To Prompt

ID: ffbemmhlkcccdcbncdgljhhaelfpjmbk

Could be malicious

Supported Languages

🇪🇹Amharic

🇸🇦Arabic

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇰🇪Swahili

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.0.2

Size

0.60 MB

Rating

2.6/5

Reviews

Users

5,000

Type

Extension

Updated

Jan 29, 2024

Publisher Contextual Analysis

Trusted

Author: zf.extension.ai.paiView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

11,064

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

ImagePrompt: The Ultimate Tool for Generating Prompt From Images.

With just a few clicks, you can input any image and convert image to prompt. You can also use this extension to extract all the images from a web page and generate prompts for them. The ImagePrompt extension is ideal for content creators, designers, and anyone who needs to generate textual descriptions for visual content. With this extension, you can easily come up with engaging captions, alt text, hashtags, and more. You can use it to analyze and understand the visual elements of a web page, and to explore the hidden meanings and associations behind them. You can also use the prompt to generate more images by MidJourney, Stable Diffusion or DALL·E 2. Features: ● Reverse any picture into its textual prompt ● Extract and analyze images from any web page ● Save and share prompts

User Growth

Showing data from Apr 14, 2023 to Apr 12, 2024

Versions

-16.67%(-1,000 users)

Compared to 3 months ago

3 versions released in this period

Rating Count

Total: 10 ratings

Average Rating

Current: 2.70 / 5.0+2.70

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High4

Medium0

Low0

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0 Code review	7

Extension Version	Code Review Findings
1.0.0	7

Files with findings

5 distinct paths — top paths by unique finding count:

js/background.js2
js/popup.af7b4ce6.js2
js/ajax-listener-other.js1
js/content-inject-other.js1
js/content-script.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	js/background.js (line 232)	A hardcoded Alibaba Cloud Log Service (SLS) endpoint named 'hawkeye-us' is configured to receive covert telemetry. The `_()` function collects the user's UUID, IP address, country, language, OS, browser type, install …	1.0.0
2	Data Exfiltration	critical	js/popup.af7b4ce6.js (line 306)	User-selected images are uploaded to the third-party API `api.gptplus.io` with the extension's persistent UUID (`user_id`) appended as a query parameter. The UUID is generated at install and never rotates, allowing th…	1.0.0
3	Unauthorized Data Collection	critical	js/background.js (line 321)	On every install or update, the extension silently fetches the user's public IP address from two third-party geolocation APIs (ipinfo.io and ip-api.com), storing the result — including IP, country, and city — in local…	1.0.0
4	Code Injection	high	js/content-inject-other.js (line 50)	This content script runs at `document_start` on every page across all URLs and all frames, and immediately injects `ajax-listener-other.js` into the page's main JavaScript world via a dynamically created `<script>` el…	1.0.0
5	Network Interception	high	js/ajax-listener-other.js (line 1)	Injected into every webpage's main world, this script uses the PerformanceObserver API to intercept every image network request made by the page. Each non-GIF image URL is exfiltrated via `window.postMessage('*')` to …	1.0.0
6	Tracking	high	js/popup.af7b4ce6.js (line 251)	Every user interaction in the popup — copying output, downloading, and analyzing an image — triggers `sendToAli`, which routes a telemetry event through the background script to the Alibaba Cloud 'hawkeye-us' endpoint…	1.0.0
7	Unauthorized Data Collection	high	js/content-script.js (line 3847)	This content script collects all image URLs intercepted from the injected PerformanceObserver into a deduplicated array (`urlArrEVFRG`) and relays them to the background script in real time. On popup open, the full ac…	1.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fontello.com	-	http://fontello.com
www.w3.org	/Graphics/SVG/1.1/DTD/svg11.dtd	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
ipinfo.io	/json	https://ipinfo.io/json
ip-api.com	/json/	http://ip-api.com/json/
developer.mozilla.org	/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
feross.org	-	https://feross.org
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/1998/Math/MathML	http://www.w3.org/1998/Math/MathML

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.1 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

unfortunately, it doesn't work.

Lizy Dee·25 Apr 2024

Что случилось с расширением?? Это был лучший инструмент и вдруг перестал работать. Исправьте пожалуйста!!!!!!!(((((

Royal Persona·16 Apr 2024

When will this Extension be repaired?

John·7 Mar 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

ImagePrompt - Reverse Image To Prompt

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating