Extension

AI Security Review

Evidence context: threat category none; evidence quality moderate.

The listing is called VPN для ChatGPT, it sits at version 5.6 on the Firefox store, the developer name is Арчи, and the manifest declares no permissions and no host permissions. That single fact limits everything else. Firefox extensions need the proxy permission before they can touch browser traffic, and host permissions before they can read or rewrite a page. Nothing in this manifest grants either, so the bypass-the-slowdowns promise in the description is not something the code is equipped to deliver.

Nothing malicious matched. There are zero malware signatures and zero obfuscation detections across 218 findings. The volume comes from two known noise sources. The first is a font: entries such as aacute.ss, agrave.ss, atilde.ss, acutecomb.case and brevecombcy.case are OpenType glyph names, stylistic alternates and combining accent forms pulled out of a typeface and read as hostnames. The second is shared infrastructure. blob.core.windows.net, browser-intake-datadoghq.com, datadoghq.com, atlassian.com and facebook.net are cloud storage, telemetry and platform domains that show up on a large share of the web.

The four network findings record that a request happens; none of them names the host. NET-FETCH-js/bg.js-571 flags a fetch in the background script. NET-JQUERY_AJAX-popup/main.js-603 and NET-JQUERY_AJAX-popup/main.js-745 flag ajax calls inside the popup. NET-JQUERY_AJAX-popup/checkout.js-58 sits in a file whose name points at a payment flow, and a checkout script under a free VPN listing usually means an upsell to a paid tier. The remaining 50 code-smell matches are low-severity pattern hits that fire on ordinary JavaScript and say nothing about intent.

The strongest argument against this reading is the name. An extension advertising itself as a VPN for ChatGPT while requesting no permissions is either unfinished or misleading, and pairing that with a file called popup/checkout.js suggests a listing built around a sales funnel. That is a fair complaint about honesty. It is not evidence of harm: no credential access, no cookie handling, no proxy configuration, no hidden payload, and one recorded user.

Two things would change the picture. A proxy permission in a later manifest, plus a destination hostname attached to the ajax call in popup/main.js, would turn a decorative listing into something that actually moves traffic. Until then the evidence points at an overpromising extension with a noisy scan, which is the common case for small VPN-branded add-ons with almost no installs.

Key Reasons

• Zero malware signature and zero obfuscation findings across 218 results
• The 164 indicators are dominated by OpenType glyph names such as aacute.ss and acutecomb.case, not real hosts
• Manifest declares no permissions and no host permissions, so the VPN claim has no capability behind it
• Network findings js/bg.js:571, popup/main.js:603 and popup/main.js:745 record calls without naming a destination
• Remaining hits are 50 low-severity code-smell pattern matches on ordinary JavaScript

False Positive Considerations

• Font glyph names (aacute.ss, agrave.ss, acutecomb.case) extracted as IoCs
• Shared telemetry and cloud domains (datadoghq.com, blob.core.windows.net, atlassian.com) counted as suspicious endpoints
• 50 low-severity code-smell matches on normal JavaScript
• Generic fetch/ajax network rules that record no hostname

Reviewed 2026-10-31; recommended action: suppress false positive; model confidence 72%.