Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Youtube Summary with ChatGPT 4

CRITICAL RISKRemoved from Chrome Web Store

Youtube Summary with ChatGPT 4

ID: bjbgpibihapchmkboankeminjcnmhelm

Could be malicious

Supported Languages

🇪🇹Amharic

🇸🇦Arabic

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇰🇪Swahili

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.0.0

Size

1.53 MB

Rating

2.8/5

Reviews

Users

4,000

Type

Extension

Updated

Apr 12, 2023

Publisher Contextual Analysis

Trusted

Author: Extension MasterView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

16,781

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Youtube Video Summary with ChatGPT extension, see transcripts of videos and summarize YouTube videos.

With Youtube Summary extension say no to watching full YouTube videos, see transcripts and get the summary of the whole video. ChatGPT Chrome Extension & YouTube Summary for you. This extension lets you access ChatGPT from your Chrome toolbar and summarizes YouTube videos to save your time. HOW IT WORKS: -Click on the box you see on the top right corner when you visit YouTube videos. Transcripts of the YouTube videos are available there. -To see the summary of the video, click on "Summary"

User Growth

Showing data from Apr 12, 2023 to Mar 10, 2024

Versions

-18.98%(-937 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 6 ratings

Average Rating

Current: 2.83 / 5.0+2.83

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High4

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0 Code review	7

Extension Version	Code Review Findings
1.0.0	7

Files with findings

3 distinct paths — top paths by unique finding count:

js/bg.js5
js/OpenAiCopy.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	js/bg.js (line 1913)	The extension registers with Google Cloud Messaging using a hardcoded project ID and immediately exfiltrates the unique GCM registration token together with the extension's own ID (`gmpt.myid`) to the external endpoin…	1.0.0
2	Remote Code Loading	critical	js/bg.js (line 1870)	The extension registers a GCM push message listener that, upon receiving a remote command, silently injects an invisible iframe into the page's <head> element (when the URL contains 'oibww') or forcibly opens new brow…	1.0.0
3	Credential Theft	high	js/bg.js (line 1509)	This function silently fetches the user's active OpenAI session token from `https://chat.openai.com/api/auth/session` and caches it. The stolen `accessToken` is then used to make authenticated API calls to `chat.opena…	1.0.0
4	Network Interception	high	js/bg.js (line 1829)	The extension uses the `webRequest` API to intercept network requests matching `://.openai.com/backend-api/accounts/check*`, effectively monitoring when the user's OpenAI session validates or refreshes. This is pair…	1.0.0
5	Privilege Escalation	high	manifest.json (line 36)	The content script `cs.js` is injected into every page the user visits (`<all_urls>`), while `OpenAiCopy.js` specifically targets all OpenAI domains. Combined with the GCM-driven iframe injection and session token the…	1.0.0
6	Unauthorized Data Collection	high	js/bg.js (line 1491)	Using the stolen session token, the extension makes authenticated POST and PATCH requests to ChatGPT's backend API, including submitting message feedback and modifying conversation visibility (`is_visible: false`). Th…	1.0.0
7	Unauthorized Data Collection	medium	js/OpenAiCopy.js (line 4)	In the fallback clipboard branch, the extension calls `navigator.clipboard.readText()` after writing to the clipboard. While the write is expected (copying ChatGPT responses), reading the clipboard back is unnecessary…	1.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

159

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fontello.com	-	http://fontello.com
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.attribution.com	/ads/1.0/	http://ns.attribution.com/ads/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/pdf/1.3/	http://ns.adobe.com/pdf/1.3/
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
mozilla.org	/MPL/2.0/	http://mozilla.org/MPL/2.0/.
github.com	/mozilla/webextension-polyfill/issues/130/n	https://github.com/mozilla/webextension-polyfill/issues/130\n
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
github.com	/uuidjs/uuid/pull/434/n	https://github.com/uuidjs/uuid/pull/434\n

Showing 1 to 10 of 160 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


158.212.224.231	IPv4	-
1.82.63.27	IPv4	-
1.53.27.161	IPv4	-
109.101.143.137	IPv4	-
25.1.2.1	IPv4	-
19.1.2.1	IPv4	-
19.1.2.2	IPv4	-
15.2.3.5	IPv4	-
19.1.2.7	IPv4	-
15.2.3.4	IPv4	-
19.1.2.9	IPv4	-
15.2.3.2	IPv4	-
19.1.2.14	IPv4	-
15.2.3.14	IPv4	-
22.1.3.4	IPv4	-
22.1.3.13	IPv4	-
22.1.3.29	IPv4	-
22.1.3.30	IPv4	-
22.1.5.2	IPv4	-
9.4.4.6	IPv4	-
9.4.4.7	IPv4	-
19.1.3.1	IPv4	-
21.1.3.27	IPv4	-
21.1.5.2	IPv4	-
19.4.1.1	IPv4	-
19.4.2.2	IPv4	-
19.4.2.3	IPv4	-
19.4.2.4	IPv4	-
19.4.2.6	IPv4	-
19.4.2.8	IPv4	-
19.4.2.9	IPv4	-
19.4.2.10	IPv4	-
19.4.2.11	IPv4	-
19.4.2.12	IPv4	-
19.4.2.13	IPv4	-
19.4.2.14	IPv4	-
19.4.2.1	IPv4	-
19.4.2.5	IPv4	-
19.1.2.4	IPv4	-
19.1.2.3	IPv4	-
19.1.2.6	IPv4	-
19.1.2.8	IPv4	-
19.4.3.4	IPv4	-
19.4.3.5	IPv4	-
20.2.1.9	IPv4	-

Showing 1 to 45 of 50 rows

Rows per page:

2.4 out of 5 · 5 most recent reviews

Text reviews

Positive

Negative

Nie działa.

John·21 Feb 2024

I try this. It summary only few minutes of video at start.

МС

Михаил Стрижов·22 Jun 2023

7 defa kullanılmaktadır yazın millet ücretsiz sanıp kurmasın boşuna.

Hbs Meizu·21 Jun 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Youtube Summary with ChatGPT 4

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating