Tracked campaign: SearchJack second wave

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by malext.io

Chrome Web Store Verified

FoundAI

by [email protected] · 469 users
b977036c-af8b-5502-8a8b-79a9caad91d9 | v1.0.6
58/ 100
MEDIUM risk
-4 since v1.0.3
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
3 months ago
Version
v1.0.6
Artifact
SHA256 944…E74
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

4 detail rows

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

42
Noisy-finding weight
x1.00
Publisher domain
explorads.com
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
9
Portfolio

12 evidence rows available.

Finding Categories

3
Network
43
IoC Indicators

Requested Permissions

7 permissions
cookies

Read and modify cookies on all sites

High
tabs
Medium
activeTab
Medium
storage
Low
declarativeNetRequest
Low
https://*.foundaiextension.com/*
Low
https://*.expldata.com/*
Low

Security Analysis Summary

Security Analysis Overview

FoundAI is a Chrome Web Store extension published by [email protected]. Version 1.0.6 has been analyzed by the Risky Plugins security platform, receiving a risk score of 57.55/100 (MEDIUM risk) based on 47 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 47 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

FoundAI is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 469 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Chrome version history

Risk trend by version

3 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected
58
Change since first
-4
Change from previous
-4
Versions:
First analyzed version
1.0.2
Mar 8, 2026
Risk range
58 to 62
Across analyzed versions
Latest analyzed version
1.0.6
Jul 13, 2026
Selected version
medium
Version
v1.0.6
3 months ago
Risk score
58
Findings
47
Change vs previous
-4

Pick any point on the chart to explore that version's code below.

About This Extension

FoundAI – Search Smarter, Not Harder. Overview: FoundAI upgrades your browser's default search to a focused experience. Say goodbye to cluttered search results and hello to instant clarity. Aztec Media’s FoundAI Search. Powered by Yahoo By setting your search to our specialized feed, you gain access to a powerful AI assistant built directly into your browser. Whether you need a quick summary of your search results or help finding a specific link in a long list, FoundAI is there to guide you. Key Features Focused search - automatically replaces your standard search with a cleaner, high-quality results page. Instant Summaries: Click the FoundAI icon while on your search page to get a smart summary of all results instantly. Smart Search Assistant: Use the extension's built-in tools to dig deeper into your search findings without leaving the page. Privacy-First Design: We don't track your identity. We only send a one-time install event (IP address) to help us prevent spam and manage unique installs. How to Use Search: Type your query into the Chrome address bar as usual. Click: On the results page, click the FoundAI icon in your toolbar to activate the AI assistant. Note: The AI assistant is specifically designed for our search feed; clicking it on other websites will show a simple status message. How to Uninstall You can return to your original settings at any time: Right-click the FoundAI icon in your toolbar. Select "Remove from Chrome..." Search Provider Disclosure This extension modifies your browser's default search settings. By installing and using this extension, you acknowledge that your default search engine will be changed to Yahoo. The search results provided are powered by Yahoo.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Reddit Search

[email protected]

MEDIUM

Safe Search

[email protected]

MEDIUM 6 users

SimplyFound

[email protected]

MEDIUM 6 users

Horoscope Search

[email protected]

MEDIUM

PureFind

[email protected]

MEDIUM 3 users

SoloSearch

[email protected]

MEDIUM