Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: ReplyPal: WhatsApp Telegram Linkedin Gmail...

CRITICAL RISKRemoved from Chrome Web Store

ReplyPal: WhatsApp Telegram Linkedin Gmail...

ID: oiccingikjdlgefjabanlbkapomljmpl

Could be malicious

Supported Languages

🇳🇱Dutch

🇺🇸English

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇵🇱Polish

🇷🇺Russian

🇪🇸Spanish

🇸🇪Swedish

Extension Info & Metadata

Status

Removed

Version

3.3

Size

0.72 MB

Rating

4.4/5

Reviews

115

Users

10,000

Type

Extension

Updated

Dec 22, 2023

Publisher Contextual Analysis

Trusted

Author: https://gpt4chat.netView Profile
Help: Help Center
MX records exist: No
Domain exists: No
Is disposable: No
Is role-based: Yes
Mailbox exists: No
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

13,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

ChatGPT plugin for Whatsapp, Linkedin, Twitter, GPT4 GMail, Free AI Assistant Writer!

GPT-4 Chat: AI for Messenger is a free tool for individuals who may face challenges in writing in English or any other language. It offers features such as grammar correction and message rewriting to enhance the quality of your written communication. Additionally, it provides suggestions for replies, making it easier to respond to messages quickly and effectively. Whether you are a non-native speaker or simply struggle with writing, this extension can be an invaluable resource to help you communicate more clearly and confidently. This Chrome extension integrates ChatGPT into various messaging platforms. By adding a GPT button, it utilizes your chat history and text input to assist you in crafting messages. Best of all, it's entirely free! **Features:** * Grammar correction: With one click, you can correct the grammar of your selected text, ensuring that your writing is free of errors and easy to read. * Selected text rewriting: The extension can rewrite your selected text in various styles, allowing you to experiment with different phrasing and find the best way to express your ideas. * Reply suggestions: Based on your chat history and your draft reply, the tool suggests messages in various styles and tones. * Custom actions: You can create custom quick access prompts for selected text, enabling you to perform actions such as translating, summarizing, or analyzing text with just one click. * Custom profiles and prompt modification: You can edit existing prompts and create custom persona profiles for chat. Please be aware that this new extension may not be compatible with all Chromium browsers and has only been tested on Chrome. Additionally, GPT-4 features are available exclusively for ChatGPT Plus Subscription users, while free plan users will have access to GPT-3.5. Update 3.3: Added Gpt4-turbo support Update 3.1: Fixed Discord Update 2.5: Added outlook and Slack support Update 2.4: Added support for GPT-4 Added LinkedIn support Renamed the chat tool from "ReplyPal" to "GPT4" Added functionality to rewrite, summarize, fix grammar, and create custom actions Update 2.2: Added a GPT form filler for websites: select text and right-click "Answer to" in the context menu Added support for LinkedIn and Slack Update 1.7: Added Twitter and WhatsApp support Added the ability to select text and generate a reply based on the selected text, as requested by our community Update 1.4: Added an "About Me" section in the settings to personalize your messages Update 1.3: Added beta support for Discord and Reddit Update 1.2: Added support for Messenger and Telegram Improved Gmail support!

User Growth

Showing data from Feb 17, 2023 to Feb 16, 2024

Versions

+11.19%(+1,006 users)

Compared to 3 months ago

19 versions released in this period

Rating Count

Total: 99 ratings

Average Rating

Current: 4.37 / 5.0+4.37

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High4

Medium1

Low0

Versions scanned

Showing 1 of 19 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.1 Code review	8

Extension Version	Code Review Findings
2.1	8

Files with findings

3 distinct paths — top paths by unique finding count:

content.js4
background.js3
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	critical	background.js (line 50)	The extension silently fetches the user's active ChatGPT session via `https://chat.openai.com/api/auth/session` and extracts the `accessToken` bearer credential. This token is then used to make authenticated API calls…	2.1
2	Privilege Escalation	critical	manifest.json (line 27)	The production manifest (v2.1) expanded the content script match pattern from specific messaging platforms (as seen in the older manifestfx.json v1.9) to `<all_urls>`, injecting content.js into every website the user …	2.1
3	Unauthorized Data Collection	critical	background.js (line 73)	The `is_visible` field controls whether the AI conversation appears in the user's ChatGPT history. This defaults to `false` (`writeLog` defaults to false per popup.js), meaning all API calls made using the stolen sess…	2.1
4	Other	high	content.js (line 134)	The hardcoded default prompt template explicitly begins with the classic prompt injection phrase "Ignore all previous instructions before this one". This is a deliberate attempt to override ChatGPT's system-level inst…	2.1
5	Privilege Escalation	high	background.js (line 146)	Upon installation, the extension immediately reloads every open browser tab. This forces the content script to be injected into all existing tabs (including banking, email, and other sensitive sites) without requiring…	2.1
6	Unauthorized Data Collection	high	content.js (line 495)	The Gmail message extractor programmatically clicks collapsed email threads (`adx`, `adf ads` class elements) to force-expand them and read their contents. This silently opens email messages the user has not chosen to…	2.1
7	Unauthorized Data Collection	high	content.js (line 583)	A global `mouseup` event listener captures all non-editable text selections on every page the user visits (since content.js runs on `<all_urls>`). Selected text from any website is stored and appended to the ChatGPT p…	2.1
8	Obfuscation	medium	content.js (line 3)	The extension suppresses all `console.log` output in production deployments by overriding it with a no-op function when the extension ID is not the developer's own instance. This actively hides runtime activity and er…	2.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


api.tmrace.net	/v1/chat/completions	https://api.tmrace.net/v1/chat/completions
api.openai.com	/v1/chat/completions	https://api.openai.com/v1/chat/completions
localhost	/v1/chat/completions	http://localhost:3000/v1/chat/completions
platform.openai.com	/account/api-keys/n	https://platform.openai.com/account/api-keys\n
platform.openai.com	/account/api-keys	https://platform.openai.com/account/api-keys
fontawesome.com	-	https://fontawesome.com
fontawesome.com	/license/free	https://fontawesome.com/license/free
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
fontawesome.comfont	-	https://fontawesome.comFont
fontawesome.comversion	-	https://fontawesome.comVersion

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Oh my goodness, just thank you so much. I really love this extension and it just helps me with my day to day emails so much. love you guys.

Sofia·4 Apr 2024

AMAZING JOB! HELPS ME SOOO MUCH!

Polash Paul·4 Apr 2024

I've been using this extension for several months now. Integration into social networks and instant messengers is done well. It's very convenient to have Chat GPT always at hand.

Natali Austin·3 Apr 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

ReplyPal: WhatsApp Telegram Linkedin Gmail...

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 19 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating