Chrome Web StoreNo malware found
In code review (vv0.6.0)
Our reviewer read version v0.6.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
17 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
NopeCHA: CAPTCHA Solver, used by 900,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 2 findings (2 medium), led by unauthorized data collection. Its permissions mean it can read and change data on all websites and can inject scripts into pages.
Key findings
- Medium
Unauthorized Data Collection
The extension collects detailed browser fingerprint data (fp, fpw, fpb) and other system information (proxy, screen, extensions, system, processes) and submits it to [domain withheld]. The Chrome Web Store disclosure only lists 'Website content', not this comprehensive fingerprinting data.
- Medium
Obfuscation
The script employs string array obfuscation, custom decoding functions, and control-flow flattening to hide its logic. This is intentional anti-analysis obfuscation beyond standard minification.
Analyst notes
The extension is a well-known captcha solver from a trusted publisher with a large user base (100k+). The permissions (debugger, scripting, all_urls) are essential for automating captcha interactions on behalf of the user. The very low ML risk score (0.01) aligns with its legitimate purpose. Data is sent to the publisher's own API ([domain withheld]) for solving. However, the extension collects extensive browser fingerprinting data beyond the disclosed 'Website content' and uses obfuscation in one content script, which are minor concerns.
NopeCHA: CAPTCHA Solver Chrome extension security report
ID: dknlfmjaanfblgfdfebhijalfmhmjjjo
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- nopecha.com
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Website
- Visit
Email Change History
Screenshots & videos
Install growth
17 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
AI Solver for reCAPTCHA, hCAPTCHA, and all CAPTCHA.
Read the publisher’s full description
Solve any CAPTCHA freely with NopeCHA for Chrome Ranked as "the best free CAPTCHA solver" by HackerNoon, NopeCHA is able to solve all popular challenges such as reCAPTCHA, hCaptcha, and more. View the complete list of supported challenges at https://developers.nopecha.com Use NopeCHA for Chrome to: • Automate sign-ups and logins on websites. No more manual solving. • Bypass CAPTCHAs on any website with ease. • Keep your session running in websites that require periodic verification like Google Colab. Do more with NopeCHA with your favorite programming languages: • Seamless integration into Selenium, Puppeteer, and other browser automation tools. • Use NopeCHA API to in your Python, Node.js, or any other programming language. • Extract words from documents, images, or any other source with our state-of-the-art OCR API. Best of all: • Free for personal use, NopeCHA works seamlessly across all major websites, providing a smooth browsing experience without interruptions. With up to 3+ million users worldwide, NopeCHA is the go-to solution for browser automation. Happy automating! • • • Questions? Reach out to us on Discord: https://nopecha.com/discord Feedback? Open an issue on GitHub: https://github.com/NopeCHALLC/nopecha-extension Explore our developer documentation: https://developers.nopecha.com
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
17 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from nopecha.com
- Beautify JSON138 users
Popular in Tools
- Montara Chrome Extension639,000,000 users
- 迅雷下载支持84,000,000 users
- Claude18,000,000 users
- Passlit Openbook10,000,000 users
- Zotero Connector9,000,000 users