Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Overlay Translate

CRITICAL RISKRemoved from Chrome Web Store

Overlay Translate

ID: pfpcdpogkleagockhnjfkoejmjjebpem

Could be malicious

Supported Languages

🇪🇹Amharic

🇸🇦Arabic

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇰🇪Swahili

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

0.3.3

Size

0.24 MB

Rating

4.2/5

Reviews

Users

30,000

Type

Extension

Updated

Jun 17, 2025

Publisher Contextual Analysis

Trusted

Author: https://overtranslate.comView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

30,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Inline translation tool: translate text without leaving the page

Overlay Translate provides inline translation. Select any text, click the icon, and get a word or selection instantly translated, similar to iPhone/Mac's "Lookup" feature. Features: ⭐ Inline translation on the page; ⭐ Quick translate in the popup; ⭐ Configure a default translations language. How to Use: Language Selection: Access the app's popup by clicking the "puzzle" icon in the toolbar to choose your preferred translation language. English is the default language. Activation: Select a word or phrase and click the icon to view instant translation. Disclamer: Translation functionality is powered by Google Translate, a trademark of Google LLC. Please note that this extension is not endorsed, affiliated, or associated with Google or its trademarks.

User Growth

Showing data from Sep 19, 2022 to Sep 18, 2023

Versions

No change in user count

Compared to 3 months ago

5 versions released in this period

Rating Count

Total: 15 ratings+2 (15%)

Average Rating

Current: 3.93 / 5.0+3.93

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium4

Low0

Versions scanned

Showing 1 of 12 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.1.1 Code review	5

Extension Version	Code Review Findings
0.1.1	5

Files with findings

3 distinct paths — top paths by unique finding count:

js/background.js3
js/content.js1
rules/translator.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Tracking	high	js/background.js (line 610)	The background service worker exfiltrates a persistent UUID client identifier (`cid`, stored in chrome.storage.local) plus the extension runtime ID to Google Analytics (UA-240235624-1) at https://www.google-analytics.…	0.1.1
2	Data Exfiltration	medium	js/content.js (line 3715)	The content script reads any user-selected text from any page (including private/authenticated content such as webmail, banking, intranet apps) and transmits it to translate.googleapis.com via $.ajax, then injects the…	0.1.1
3	Network Interception	medium	rules/translator.json (line 4)	The declarativeNetRequest rule strips the X-Frame-Options response header on translate.google.com sub-frames so the page can be embedded inside an attacker- or extension-controlled iframe context, and removes integrit…	0.1.1
4	Privilege Escalation	medium	js/background.js (line 640)	On install, the extension enumerates every open tab across all URLs and force-injects content.js + content.css into all frames (including iframes) using chrome.scripting.executeScript with allFrames:true. Combined wit…	0.1.1
5	Unauthorized Data Collection	medium	js/background.js (line 597)	A v4 UUID is generated on first run and persisted to chrome.storage.local under key `cid`, then attached to every outbound Google Analytics ping. This is a stable cross-session pseudonymous device identifier used pure…	0.1.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Inter:wght@300;400&display=swap
getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/main/LICENSE	https://github.com/twbs/bootstrap/blob/main/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
translate.google.com	-	https://translate.google.com/?sl=auto&tl=${u}&hl=${u}`,RI.addEventListener(
www.google-analytics.com	/mp/collect	https://www.google-analytics.com/mp/collect
www.google-analytics.com	/debug/mp/collect	https://www.google-analytics.com/debug/mp/collect
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
localhost	-	http://localhost
overtranslate.com	-	https://overtranslate.com/

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Лучшее приложение для быстрого перевода небольших текстов/предожений/слов. Абсолютно не перегружает интерфейс, никаких доп.менюшек, тыщи пунктов, какой-то нелепой сотни настроек. Просто выделил, нажал на значек, получил перевод.

Yuri Ivanov·9 Dec 2024

Explore new opportunities with us to increase revenue and expand your chrome extension. See how we can help you. Details at: https://extensionbuysell.com We are looking forward to working with you! Best regards,

Kieran Godfrey·13 Sept 2024

Shows the translation for japanese but not what the pronunciation of the word. Useless.

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Overlay Translate

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 12 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating