Is ChatGPT File Uploader safe?

Question

Accepted Answer

ChatGPT File Uploader is medium risk. Dynamic analysis captured the ChatGPT File Uploader extension fetching a URL from a third-party server (customergen.pythonanywhere.com) every time its popup opens, then creating a new browser tab pointed at whatever address that server returns. The extension's popup also embeds an iframe loading content directly from the same host. Neither the iframe nor the URL-redirect behavior is described in the Chrome Web Store listing, which mentions only file-upload functionality. Because the server controls the destination URL, it can direct any user to any web address at any time without the user's knowledge.

Is ChatGPT File Uploader safe?

Findings