Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: MetAI assistant

CRITICAL RISKRemoved from Chrome Web Store

MetAI assistant

ID: bacdmchfhbimgegkjdejanaboldphnmi

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

0.1.1

Size

0.30 MB

Rating

0.0/5

Reviews

Users

5,426

Type

Extension

Updated

Feb 25, 2023

Publisher Contextual Analysis

Author: http://extjourney.comView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

5,426

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

MetAI assistant on OpenAI for Facebook communication

Using MetAI you can be free from the chains of misunderstanding or language restrictions. - Feature 1 Chat in extension's bar. In popup extension bar you can Chat with AI: "input message for AI bot" and press "AI-bot!" - Feature 2 AI assistanse in Facebook. OpenAI assistant gives you cool featutes to messaging fast in facebook site. Yellow message with description is in the left of facebook site. * To get the reply of AI assistant you need 1 click left mouse on the text in facebook site. * Besides you can select the text on FB to get the AI answer. * To copy to clipboard the AI answer you need to click on the green message. * You can paste the AI answer to input line. Doubleclick on any input line is to paste copied AI message, but sometimes it's not working on FB. In popup extension you can OFF/ON AI-assistant in FB, press the button "Now AI =.." It takes some time to get AI answer, please wait for a while. The yellow message near your cursor asked you Be patience. ---------------------------------------- Install MetAI and free up a lot of time to thinking about text, make your communication easier! ----------------------------------------

User Growth

Showing data from Feb 22, 2023 to Mar 28, 2023

Versions

No change in user count

Compared to 1 month ago

2 versions released in this period

Rating Count

Total: 0 ratings

Average Rating

Current: 0.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High3

Medium1

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.1.0 Code review	7

Extension Version	Code Review Findings
0.1.0	7

Files with findings

4 distinct paths — top paths by unique finding count:

contentScript.js4
background.js1
manifest.json1
popup.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	critical	contentScript.js (line 4982)	A live OpenAI API key (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) is hardcoded directly in the distributed extension bundle, exposed to every user who installs the extension. Any user can extract this key an…	0.1.0
2	Credential Theft	critical	popup.js (line 4920)	The same hardcoded OpenAI API key appears in popup.js, used to relay whatever the user types into the extension popup directly to OpenAI's servers. Both files share the same key, confirming the credential is globally …	0.1.0
3	Unauthorized Data Collection	critical	contentScript.js (line 5304)	On every mouseup event on facebook.com, the extension captures either the user's selected text or the full innerHTML of any clicked element and transmits it verbatim to api.openai.com. This includes private Facebook m…	0.1.0
4	Code Injection	high	contentScript.js (line 5587)	The extension can silently replace the content of any Facebook DOM element (including message compose boxes and comment fields) with AI-generated text by clearing all children and injecting a new span. This DOM manipu…	0.1.0
5	Code Injection	high	background.js (line 61)	The background service worker automatically injects contentScript.js into every active tab whenever any tab is updated, without checking whether the current tab is facebook.com or requiring any user action. This means…	0.1.0
6	Unauthorized Data Collection	high	contentScript.js (line 5637)	A global mouseup event listener is attached to the entire Facebook page DOM, capturing every click interaction by the user. The toggle function then reads the target element's innerHTML or the window's selection text …	0.1.0
7	Privilege Escalation	medium	manifest.json (line 34)	The manifest declares externally_connectable with a wildcard id ("*"), allowing any installed Chrome extension to send messages to this extension via chrome.runtime.sendMessage or chrome.runtime.connect without restri…	0.1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.google.com	-	http://www.google.com
url.spec.whatwg.org	-	http://url.spec.whatwg.org/#urlutils
nodejs.org	/api/http.html	https://nodejs.org/api/http.html#http_message_headers
openapi-generator.tech	-	https://openapi-generator.tech
jsonlines.readthedocs.io	/en/latest/	https://jsonlines.readthedocs.io/en/latest/
developer.mozilla.org	/en-US/docs/Web/API/Server-sent_events/Using_server-sent_events	https://developer.mozilla.org/en-US/docs/Web/API/Server-sent_events/Using_server-sent_events#Event_stream_format
api.openai.com	/v1	https://api.openai.com/v1
example.com	-	https://example.com
developer.chrome.com	/extensions/storage	https://developer.chrome.com/extensions/storage
developer.chrome.com	/extensions/declare_permissions	https://developer.chrome.com/extensions/declare_permissions

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

MetAI assistant

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating