Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →
Also reported by bleepingcomputer.com
AI Grammar Checker
Confirmed member of a tracked malicious supply-chain campaign.
Analysis record
- Analysed
- 3 weeks ago
- Version
- v2.0.1
- Artifact
- SHA256 848…C38
- Source
- Findings (non-IoC)
Evidence ledger
Ranked by severity · findings with a source location link to the code viewer
Publisher Evidence
Limited evidencePublisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.
11 evidence rows available.
Finding Categories
Requested Permissions
3 permissionsAI Security Report
AI Security Review
Summary
MANUAL OVERRIDE (RiskyPlugins #68): adware, NOT a false positive. After ownership handoff ([email protected] to [email protected]), v1.0.1 injected an ads-platform payload beaconing to ext-ads-mvp.captain-products.workers.dev (jivo partner_id=49587, utm_source=extads). Part of an 8+ extension farm ~560k installs. Supersedes the stale v1.0.0 likely_false_positive verdict, which reviewed the pre-handoff clean version.
Key Reasons
- Injected ad payload beaconing to captain-products C2 (TI-confirmed adware)
- Ownership handoff then payload injection in v1.0.1
- Member of 8+ extension adware farm (~560k combined installs)
Reviewed 2026-07-03; recommended action: flag adware; model confidence 95%.
Chrome version history
Risk trend by version
3 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.
Pick any point on the chart to explore that version's code below.
Source Code Not Available
Source code is not available for this version of the extension.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
Detect Font
[email protected]
Transcript For Youtube Videos
[email protected]
Dark Mode
[email protected]
种草星球-TikTok爆单神器,商品自动提报采集邀评【永久免费】
[email protected]
Kindredly - A safer, private web for families
[email protected]
Open Headers
[email protected]