Chrome Web Store

47Versions

1Code reviewed

Do not install

Code review: critical

Our reviewer read this extension’s code and confirmed malicious behaviour. 1 security finding documented below. Do not install it. Remove it if you already have it.

NextAI Translator

ID: ogjibjphoadhljaoicdnjnmgokohngcc

Extension Info & Metadata

Status

Active

Version

0.6.2

Size

5.05 MB

Rating

4.0/5

Reviews

317

Users

100,000

Type

Extension

Updated

Oct 31, 2025

Publisher Contextual Analysis

Trusted

Author: yetoneView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

101,323

Screenshots & videos

Install growth

User Growth

Showing data from Mar 07, 2023 to Mar 07, 2024

Versions

No change in user count

Compared to 3 months ago

41 versions released in this period

See plans

React Flow

Internal permhash`3b63358e99…`
2 malicious

2 other extensions carry this fingerprint; 2 of the cluster are known malicious.

Withheldmalicious
Withheldnot flagged

Permhash (Mandiant)`a5bc2e5b8e…`
5 malicious

18 other extensions carry this fingerprint; 5 of the cluster are known malicious.

Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
+11 more

Network indicators

104 URLs and 495 IP literals were extracted from this version.

Item	Type	Severity	Description
webRequest	Permission	Critical	This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 10% increase: About:blank access enables potential sandbox escape vectors
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://*.openai.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.openai.azure.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.ingest.sentry.io/	Host	Medium	Host permission — access limited to this URL pattern.
*://speech.platform.bing.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.googletagmanager.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.google-analytics.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.minimax.chat/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.githubusercontent.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.baidu.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://api-edge.cognitive.microsofttranslator.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.microsoft.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.google.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.googleapis.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.moonshot.cn/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.volces.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.chatglm.cn/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.cohere.ai/	Host	Medium	Host permission — access limited to this URL pattern.
https://*.deepseek.com/	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: https://.ingest.sentry.io/, ://speech.platform.bing.com/, https://.googletagmanager.com/, https://.google-analytics.com/, https://.githubusercontent.com/, https://.google.com/, https://*.googleapis.com/
About:blank Access	Risk Factor	Medium	This extension can run content scripts in about:blank pages.
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Sensitive Domain Access

This extension has access to the following sensitive domains:

https://*.ingest.sentry.io/
*://speech.platform.bing.com/
https://*.googletagmanager.com/
https://*.google-analytics.com/
https://*.githubusercontent.com/
https://*.google.com/
https://*.googleapis.com/

1 critical

The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

NextAI-Translator is a browser extension that uses the ChatGPT API for translation.

Read the publisher’s full description

这是一个使用 ChatGPT API 进行划词翻译、总结、润色、分析、代码解释的浏览器插件。借助了 ChatGPT 强大的翻译能力，它将帮助您更流畅地阅读、编辑外语。

User reviews

3.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

ジュウブン満族❣❣

Adhok松沢進·3 Sept 2026

真垃圾，经常遇到无法翻译，无法读取openAI模型的情况

D Kobayashi·7 Jul 2026

good and convenient.

Noct Stone (Lamrock)·26 Jun 2026

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

104

IPv4

495

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version	Size	Verdict	Findings	Permhash
0.6.2 Latest	5.05 MB	Malicious	0	a5bc2e5b8ee03cb59f2f8d4212eaa633ce954101bab21d0c03a5a09fbd68c07c
0.4.21	5.04 MB	Not scanned	—	a5bc2e5b8ee03cb59f2f8d4212eaa633ce954101bab21d0c03a5a09fbd68c07c
0.3.41	5.02 MB	Not scanned	—	a5bc2e5b8ee03cb59f2f8d4212eaa633ce954101bab21d0c03a5a09fbd68c07c
0.3.36	5.01 MB	Not scanned	—	a5bc2e5b8ee03cb59f2f8d4212eaa633ce954101bab21d0c03a5a09fbd68c07c
0.3.10	5.00 MB	Not scanned	—	7fcfffe678934f275704d67bc8852dbcfb61afc92b0f90d40eb9abcc303d6f5c
0.3.9	4.98 MB	Not scanned	—	7fcfffe678934f275704d67bc8852dbcfb61afc92b0f90d40eb9abcc303d6f5c
0.3.8	4.98 MB	Not scanned	—	7fcfffe678934f275704d67bc8852dbcfb61afc92b0f90d40eb9abcc303d6f5c
0.3.7	4.98 MB	Not scanned	—	7fcfffe678934f275704d67bc8852dbcfb61afc92b0f90d40eb9abcc303d6f5c
0.3.6	5.92 MB	Not scanned	—	7fcfffe678934f275704d67bc8852dbcfb61afc92b0f90d40eb9abcc303d6f5c
0.3.2	4.98 MB	Not scanned	—	7fcfffe678934f275704d67bc8852dbcfb61afc92b0f90d40eb9abcc303d6f5c

Showing 1 to 10 of 50 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Do not install