[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

MoodleGPT

Version 1.1.5 View in Chrome Web Store

Last scanned: about 11 hours ago

Extension Details

Rating: 3.8 ★ (17 ratings)

Users: 3,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 2 total findings, including 1 high-risk finding.

Findings

HIGH

Broad Content Script Injection

This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage

Embedded URLs (47 total):

https://clients2.google.com/service/update2/crx	https://docs.expo.dev/versions/latest/sdk/expo/#expofetch-api
https://api.openai.com/v1	https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety
https://stackoverflow.com/a/2117523	https://url.spec.whatwg.org/#url-scheme-string
https://stackoverflow.com/a/34491287	https://eslint.org/docs/latest/rules/no-prototype-builtins
https://github.com/JS-DevTools/host-environment/blob/b1ab79ecde37db5d6e163c050e54fe7d287d7c92/src/isomorphic.browser.ts	https://nodejs.org/api/process.html#processarch
https://doc.deno.land/deno/stable/~/Deno.build	https://nodejs.org/api/process.html#processplatform
https://github.com/denoland/deno/issues/14799	https://github.com/nodejs-mobile/nodejs-mobile
https://github.com/MattiasBuelens/web-streams-polyfill/pull/122#issuecomment-1627354490	https://undici.nodejs.org/#/?id=garbage-collection
https://github.com/encode/httpx/blob/920333ea98118e9cf617f246905d7b202510941c/httpx/_decoders.py#L258	https://datatracker.ietf.org/doc/html/rfc3986#section-3.3:
https://platform.openai.com/docs/assistants/how-it-works/runs-and-run-steps	https://github.com/openai/openai-node/pull/1312
https://platform.openai.com/docs/guides/evals	https://platform.openai.com/docs/assistants/tools
https://platform.openai.com/docs/api-reference/fine-tuning/chat-input	https://platform.openai.com/docs/api-reference/fine-tuning/completions-input
https://platform.openai.com/docs/api-reference/batch/request-input	https://help.openai.com/
https://platform.openai.com/docs/guides/model-optimization	https://platform.openai.com/docs/guides/moderation
https://platform.openai.com/docs/guides/background	https://platform.openai.com/docs/api-reference/uploads/part-object
https://platform.openai.com/docs/api-reference/uploads/object	https://platform.openai.com/docs/api-reference/uploads/complete
https://platform.openai.com/docs/api-reference/files/object	https://platform.openai.com/docs/assistants/tools/file-search#supported-files
https://platform.openai.com/docs/api-reference/files/create	https://stackoverflow.com/questions/40639432/what-is-the-best-way-to-limit-concurrency-when-using-es6s-promise-all
https://platform.openai.com/docs/api-reference/files	https://platform.openai.com/docs/api-reference/vector-stores/object
https://platform.openai.com/docs/api-reference/files/delete	https://github.com/nodejs/undici/issues/2294
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Retry-After	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
https://www.flaticon.com/free-icons/mortarboard	https://www.buymeacoffee.com/yoannchbpro
https://github.com/yoannchb-pro/MoodleGPT	https://github.com/yoannchb-pro/MoodleGPT/issues
https://raw.githubusercontent.com/yoannchb-pro/MoodleGPT/main/package.json

Raw Manifest

{
  "name": "MoodleGPT",
  "icons": {
    "16": "icon.png",
    "32": "icon.png",
    "48": "icon.png",
    "128": "icon.png"
  },
  "action": {
    "default_icon": "icon.png",
    "default_popup": "./popup/index.html"
  },
  "version": "1.1.5",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Hidden chat-gpt for your moodle quiz",
  "permissions": [
    "storage"
  ],
  "content_scripts": [
    {
      "js": [
        "MoodleGPT.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*/**/mod/quiz/attempt.php*",
        "*://*/mod/quiz/attempt.php*",
        "file:///*"
      ]
    }
  ],
  "manifest_version": 3
}

by ✦ Astarte