EXTENSION BANNED FOR STEALING AI CHATS RETURNS TO CHROME STORE, RESUMES MALICIOUS ACTIVITIES

Summary from the TLDR InfoSec newsletter

Google pulled "AI Sidebar with DeepSeek, ChatGPT, Claude and more" in January after OX Security found it scraping ChatGPT/DeepSeek chats and sending them to external domains, with 300,000+ installs by then. It's back on the Chrome Web Store. Netskope found version 1.7.3.0 added 21 lines that open affiliate links on update events and hijack the uninstall URL for referral commissions.