Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Quick Search with ChatGPT

CRITICAL RISKRemoved from Chrome Web Store

Quick Search with ChatGPT

ID: khdnaopfklkdcloiinccnaflffmfcioa

Could be malicious

Supported Languages

🇪🇹Amharic

🇸🇦Arabic

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇰🇪Swahili

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.0.3

Size

0.82 MB

Rating

4.7/5

Reviews

516

Users

1,000,000

Type

Extension

Updated

Feb 2, 2024

Publisher Contextual Analysis

Author: ChatGPT LiteView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

1,000,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Incorporate ChatGPT responses into search engine outcomes! Works with Google, Bing, Yahoo etc. Gain access to ChatGPT in a pop-up.

GPT Search is an extension that allows you to access ChatGPT answers alongside Google, Bing, DuckDuckGo, and other search engines. This AI Copilot will help you digest information from the web quickly, regardless of the content's length or difficulty. **Features** * Supports all popular search engines * Chat with ChatGPT about the query and answer * Supports official OpenAI API (Both GPT-3.5-Turbo and GPT-3) * Supports ChatGPT Plus and GPT-4 (GPT-4 requires manual enable in options) * Access ChatGPT from extension popup * Markdown rendering * Code highlights * Dark mode * Feedback to improve ChatGPT * Custom trigger mode * Copy to clipboard * Summarize YouTube videos and web articles **How to use** 1. Install the extension from the Chrome Web Store. 2. Open a search engine in your Chrome browser. 3. Type in a search query. 4. The ChatGPT response will appear alongside the normal search engine results. 5. You can click on the ChatGPT response to open a chat window with ChatGPT. 6. In the chat window, you can ask ChatGPT questions about the search query. 7. ChatGPT will answer your questions and provide additional information. 8. To summarize a web page, right click on the webpage and then click on the "Summarize Page" button. You can also summarize a YouTube video by this way. **Benefits** * Save time and effort by getting the information you need quickly and easily. * Get more comprehensive and informative answers by asking ChatGPT questions. * Improve your research skills by learning from ChatGPT's insights.

User Growth

Showing data from Mar 29, 2023 to Mar 27, 2024

Versions

No change in user count

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 510 ratings+2 (0%)

Average Rating

Current: 4.74 / 5.0+4.74

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High5

Medium4

Low1

Versions scanned

Showing 2 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.2 Code review	6
1.0.0 Code review	8

Extension Version	Code Review Findings
1.0.2	6
1.0.0	8

Files with findings

3 distinct paths — top paths by unique finding count:

js/background.js8
js/sw.js4
js/cnt.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	js/background.js (line 1353)	The extension initializes communication with third-party command-and-control domains 'gptsear.ch' (Chrome) and 'gptedge.net' (Edge). These are not OpenAI domains and serve as the backend for action tracking, configura…	1.0.0
2	Remote Code Loading	critical	js/background.js (line 1431)	The extension periodically polls 'gptsear.ch/api/config/' sending a base64-encoded payload with extension ID, version, timestamp, and persistent UID. The entire response is merged into the local config object with no …	1.0.0
3	Remote Code Loading	critical	js/background.js (line 1697)	The extension fetches a 'classes' payload from 'gptsear.ch/api/classes/' and stores it directly into the extension settings without any validation or integrity check. This 'classes' data is then used as CSS selectors …	1.0.0
4	Tracking	critical	js/background.js (line 1370)	On every extension install/update action, the extension sends a base64-encoded beacon containing the extension ID, version, a persistent unique user ID (uid), and a timestamp to 'gptsear.ch/api/action/'. The server ca…	1.0.0
5	Credential Theft	high	js/sw.js (line 5397)	The extension programmatically requests the user's ChatGPT session endpoint and extracts the returned `accessToken`. That token is a bearer credential for the user's OpenAI web session, so harvesting and caching it gi…	1.0.2
6	Credential Theft	high	js/background.js (line 1321)	The extension silently fetches the user's OpenAI session token from 'chat.openai.com/api/auth/session' and caches it in an in-memory TTL store for up to 10 seconds. This access token is then used in subsequent API cal…	1.0.0
7	Network Interception	high	js/background.js (line 1744)	The extension attaches a webRequest.onSendHeaders listener that intercepts outgoing request headers to the ChatGPT authentication session endpoint. While claimed to be for detecting when login completes, reading reque…	1.0.0
8	Tracking	high	js/background.js (line 1415)	On first install, the extension generates a persistent unique identifier (UID) and stores it in local storage. This UID is then included in every subsequent beacon call to the C2 servers, allowing the operator to trac…	1.0.0
9	Tracking	high	js/background.js (line 1392)	The extension registers an uninstall URL that beacons the user's persistent UID and extension version to 'gptsear.ch/uninstall/' when the extension is removed. This continues user tracking even after uninstallation an…	1.0.0
10	Data Exfiltration	medium	js/cnt.js (line 74387)	For page-summary requests, the content script reads the current document/PDF, extracts text, and packages the full URL and content for background processing. On an extension that runs on `:///*`, this is a broad con…	1.0.2
11	Network Interception	medium	js/sw.js (line 6200)	The extension uses `webRequest` to watch authenticated requests from the ChatGPT login tab. Even though it appears intended to detect successful login, it is still active network interception of a sensitive OpenAI end…	1.0.2
12	Other	medium	js/sw.js (line 6017)	The extension downloads page-manipulation rules from an operator-controlled domain at runtime and stores them into local settings. This is a remote control channel for behavior on all matched sites, even though no suc…	1.0.2
13	Other	medium	js/cnt.js (line 74587)	These remotely supplied selectors are enforced every second on every page where the content script runs, forcibly hiding matching elements. Combined with the remote `/api/classes/` feed and `:///*` scope, the operat…	1.0.2
14	Tracking	low	js/sw.js (line 6189)	The extension reports install and uninstall lifecycle events to the developer's domain by opening a remote install URL and setting a remote uninstall URL. This creates a tracking hook tied to extension installs/remova…	1.0.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Lato:wght@400;700&family=Montserrat:ital@0;1&display=swap
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license
js.foundation	-	https://js.foundation/
github.com	/facebook/regenerator/blob/main/LICENSE	https://github.com/facebook/regenerator/blob/main/LICENSE
chat.openai.com	/api/auth/session	https://chat.openai.com/api/auth/session
www.youtube.com	/watch	https://www.youtube.com/watch?v=
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

1.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Não está funcionando, estou usando o TinaMind agora.

Heidi Layla·4 Sept 2024

仕事はしていません。今�� TinaMind を使っています。

Linda Una·5 Aug 2024

仕事はしていません。今は TinaMind を使っています。

Linda Una·5 Aug 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Quick Search with ChatGPT

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions14

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating