Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: MultiOn

CRITICAL RISKRemoved from Chrome Web Store

MultiOn

ID: ddmjhdbknfidiopmbaceghhhbgbpenmm

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

0.28.0

Size

19.30 MB

Rating

3.9/5

Reviews

Users

9,000

Type

Extension

Updated

Dec 3, 2024

Publisher Contextual Analysis

Trusted

Author: https://multion.aiView Profile
Privacy: Privacy Policy
Country: US
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: 789 Los Robles Ave Palo Alto, CA 94306-3161 US
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

9,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Your AI Web Co-Pilot: Don't browse alone anymore!

MULTI·ON is a browser AI assistant & co-pilot that works together with a user & takes in natural language input to simplify web browsing It can help you with finding any web content, ordering food on doordash, shopping on on amazon, post on social media like Twitter, LinkedIn & Messenger, fill out any forms & give shopping opinions, and can be triggered by as simply as opening a new tab page. Changelog: https://changelog.multion.ai/

User Growth

Showing data from Feb 19, 2024 to Jan 27, 2025

Versions

+50%(+3,000 users)

Compared to 3 months ago

40 versions released in this period

Rating Count

Total: 27 ratings+3 (13%)

Average Rating

Current: 3.93 / 5.0-0.62

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium3

Low0

Versions scanned

Showing 1 of 41 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.15.1 Code review	6

Extension Version	Code Review Findings
0.15.1	6

Files with findings

2 distinct paths — top paths by unique finding count:

popup.bundle.js5
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	high	popup.bundle.js (line 25283)	AWS Cognito OAuth2 client_secret is hardcoded in the shipped extension bundle alongside the client_id and auth URL. Any user can extract this secret from the publicly distributed CRX and impersonate the application's …	0.15.1
2	Privilege Escalation	high	manifest.json (line 49)	The extension combines maximal privilege (cookies + identity + scripting + webNavigation + tabs + `<all_urls>` host access + `match_about_blank` + content scripts on every URL) with a sandboxed page CSP that allows `u…	0.15.1
3	Unauthorized Data Collection	high	popup.bundle.js (line 18708)	The popup wires a full rrweb session-recording control plane (StartRecord / StopRecord / EmitEvent, RECORDING/PAUSED state machine, buffered event store) into the extension's message bus. Combined with the manifest's …	0.15.1
4	Data Exfiltration	medium	popup.bundle.js (line 25293)	Production extension routes its primary AI/agent traffic (langchain prompts, query retrieval) to a Vercel preview-deployment URL pinned to a git branch (`multion-vercel-git-main-multion.vercel.app`), not to the platfo…	0.15.1
5	Tracking	medium	popup.bundle.js (line 27343)	The same Sentry client is initialized in the CONTENT_SCRIPT namespace (line 27398) and globally monkey-patches `window.addEventListener` on every page the user visits, wrapping every listener so that thrown errors — t…	0.15.1
6	Tracking	medium	popup.bundle.js (line 2319)	A full Mixpanel SDK is bundled and configured to call its tracking endpoint with `credentials: "include"` (line 2529) and a base64-obfuscated payload format. It identifies users via `$identify` / `$user_id` (line 2802…	0.15.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

100

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/testing-library/dom-testing-library/issues/830	https://github.com/testing-library/dom-testing-library/issues/830
html.spec.whatwg.org	/multipage/forms.html	https://html.spec.whatwg.org/multipage/forms.html#category-label
testing-library.com	/docs/dom-testing-library/api-queries	https://testing-library.com/docs/dom-testing-library/api-queries#byrole
testing-playground.com	-	https://testing-playground.com/#markup=
testing-library.com	/s/screen-global-error	https://testing-library.com/s/screen-global-error
github.com	/testing-library/user-event/blob/main/README.md	https://github.com/testing-library/user-event/blob/main/README.md#keyboardtext-options\n
github.com	/testing-library/user-event%60	https://github.com/testing-library/user-event`
www.w3.org	/1999/xhtml	http://www.w3.org/1999/xhtml
prettier.io	/docs/en/plugins.html	https://prettier.io/docs/en/plugins.html#optional-embed
github.com	/facebook/regenerator/blob/main/LICENSE	https://github.com/facebook/regenerator/blob/main/LICENSE

Showing 1 to 10 of 100 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


17.142.31.207	IPv4	-
44.101.204.165	IPv4	-

1.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Totally impossible to registrate...

Lars Rensjö·24 Jan 2025

Es imposible poder registrarse

pady mac·22 Jan 2025

Useless add ons

Md. Nahid Kadir·20 Jan 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

MultiOn

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 41 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating