Is AI Sidebar | DeepSeek, Gemini, Claude, GPT safe?
DeepSider is medium risk. Dynamic analysis captured DeepSider fetching a JSON config from Alibaba OSS and Tencent COS on every load. The file lists URLs replacing built-in API, upload, and media-proxy endpoints. Whoever controls that bucket can redirect all traffic.
Who publishes itDeepSider - no other listings under this identity, 2 shared hostnames
DeepSider - no other listings under this identity, 2 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 2 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
API Endpoints Overridable via Third-Party CDN Config
Dynamic analysis captured DeepSider fetching a JSON config from Alibaba OSS and Tencent COS on every load.
The file lists URLs replacing built-in API, upload, and media-proxy endpoints.
Whoever controls that bucket can redirect all traffic.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-829
- Source
- Dynamic sandbox
You install or restart DeepSider.
The extension fetches a JSON file from Alibaba Cloud OSS and Tencent Cloud COS that can replace every API and upload endpoint it uses.
The replacement happens before any user interaction. All subsequent network requests, AI queries, file uploads, media proxying, go to whichever hosts the CDN response names.
- Accept
- application/json, text/plain, */*
- api-static-domai.oss-cn-beijing.aliyuncs.com
Primary host-config source (Alibaba Cloud OSS bucket)
- api-static-domai-1308089883.cos.ap-guangzhou.myqcloud.com
Fallback host-config source (Tencent Cloud COS bucket)
- web.public.deepsider.pro
Second fallback host-config source
The current JSON contents of all three CDN sources are deepsider-controlled and point to legitimate deepsider.ai/net/pro infrastructure. The risk is conditional: it materializes if any of the three cloud storage buckets is misconfigured for public write access, or if an actor with bucket credentials modifies the file. No such compromise has been observed. The extension performs no signature verification or hostname allowlist check on the returned URLs beyond confirming they start with 'http'.