Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — SearchGPT for Chrome [browser-hijack] + malext.io malicious_extension_sentry (+2.5, capped).
• Default search provider overridden to feed.searchgpt.me — all user queries routed to dev-controlled server.
• Content scripts injected on all URLs (*://*/*) enabling broad page-level access.
• Privacy policy URL returns connection error — policy effectively unverifiable; privacy pillar scores maximum.
• Extension is 31 months stale; zombie state with 3,000 active installs increases supply-chain risk.

Evidence

• search_provider_override manifest chrome_settings_overrides sets feed.searchgpt.me as default search engine; is_default=true.
• broad_content_scripts manifest content_scripts_matches includes *://*/*ー full-page access on every site.
• privacy_policy_unreachable api privacy_policy_classification.fetched=false; fetch_error:ConnectionError; policy unverifiable.
• uninstall_url_hijack crx uninstall_url_hijack=true; typical monetization/tracking shell pattern.
• install_url_hijack crx install_url_hijack=true targeting https://chat.openai.com/auth/login on install.
• stale_extension store 31 months since last update; well past 24-month zombie threshold.
• free_webmail_no_dev_name store Developer email noam.goldberg94@gmail.com; developer_name empty; no verified publisher.
• js_external_hosts crx JS contacts assets-cdn.github.com, chat.openai.com, feed.searchgpt.me, github.com, searchgpt.me.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — SearchGPT for Chrome [browser-hijack] + malext.io malicious_extension_sentry; score 7.09 -> 9.59 (+2.5 cap 2.5).

Permissions Breakdown

• storage low Local data persistence only; low standalone risk.
• declarativeNetRequest medium Can intercept/redirect network requests; paired with search_provider override raises risk.
• contextMenus low UI surface only; minimal risk.
• host_permission: https://www.bing.com/* medium Access to Bing search; enables query interception/redirect for monetization.
• host_permission: https://feed.searchgpt.me/* high Dev-controlled feed domain; all search queries routed here; privacy risk.
• content_scripts: *://*/* high Broad content script injection on all sites; content read/write on every page.
• chrome_settings_overrides: search_provider (is_default=true) high Sets feed.searchgpt.me as default search engine; all searches exfiltrated to dev.

Pillar Scores

Bookkeeping