Malicious Chrome/Edge Extensions Database

An automatically updated database of Chrome extensions removed from the Chrome Web Store for containing malware, policy violation, or bundling unwanted software

🌐 Live Dashboard

Real-time search, filtering by threat category, and source reports, built on top of this database.

📖 Overview

This repository maintains a current list of Chrome extensions that have been removed for malware, security violations, or malicious behavior. Since no regularly-updated public database exists for this purpose, this project automates the collection and aggregation of extension removals from multiple sources.

I created this project after searching for an updated list of malicious Chrome extensions and finding that most resources were outdated or incomplete. I'm committed to keeping this database alive and current through automated monitoring and community contributions.

🔍 MalExt Scanner

⚡ Check YOUR extensions right now!

Quick Start

Prefer a GUI? The MalExt Sentry Chrome extension scans automatically every 6 hours in the background.

⚠️ Note: The extension scans per browser profile. If you use multiple profiles, install it in each one.

One-line install & scan:

Linux & macOS:

curl -O https://raw.githubusercontent.com/toborrm9/malicious_extension_sentry/main/malext.py && python3 malext.py

Windows PowerShell < v7:

Invoke-WebRequest -Uri https://raw.githubusercontent.com/toborrm9/malicious_extension_sentry/main/malext.py -OutFile malext.py; python3 malext.py

Windows PowerShell >= v7:

Invoke-WebRequest -Uri https://raw.githubusercontent.com/toborrm9/malicious_extension_sentry/main/malext.py -OutFile malext.py && python3 malext.py

✨ Features

• ✅ Cross-platform - Windows, macOS, Linux
• 🔍 Instant scan - Chrome, Edge, Chromium, Brave, Vivaldi, Opera + auto-discovered Chromium-based browsers
• 🌐 Auto-updates - Downloads latest database
• 🛡️ Zero install - Just Python 3
• 🔒 Privacy-first - 100% local scanning

📸 Example Output

╔════════════════════════════════════════════════════════════════════╗
║        ███╗   ███╗ █████╗ ██╗     ███████╗██╗  ██╗████████╗      ║
║        ████╗ ████║██╔══██╗██║     ██╔════╝╚██╗██╔╝╚══██╔══╝      ║
║        ██╔████╔██║███████║██║     █████╗   ╚███╔╝    ██║         ║
║        ██║╚██╔╝██║██╔══██║██║     ██╔══╝   ██╔██╗    ██║         ║
║        ██║ ╚═╝ ██║██║  ██║███████╗███████╗██╔╝ ██╗   ██║         ║
║        ╚═╝     ╚═╝╚═╝  ╚═╝╚══════╝╚══════╝╚═╝  ╚═╝   ╚═╝         ║
║              🛡️  Malicious Extension Scanner v1.0 🛡️              ║
║                    Created by: @toborrm9                          ║
╚════════════════════════════════════════════════════════════════════╝

💻 Detected OS: macOS
✅ Loaded 437 known malicious extension IDs
✅ Found 12 extensions (Chrome: 8, Edge: 4)

======================================================================
📊 SCAN RESULTS
======================================================================

✅ GOOD NEWS: No malicious extensions detected!
   All 12 extensions are clear.

⚠️  WARNING: 1 MALICIOUS EXTENSION(S) DETECTED!

🔴 REMOVE THESE IMMEDIATELY:
----------------------------------------------------------------------
❌ Malicious Extension
   ID: abcdefghijklmnopqrstuvwxyz123456
   Browser: Chrome (Default)

🛡️  HOW TO REMOVE:
   1. Open Chrome
   2. Go to chrome://extensions
   3. Find the extension and click 'Remove'

📰 Recent Security News

• 2026-03-09: Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft
• 2026-02-13: Malicious Chrome Extensions Caught Stealing Business Data, Emails, and Browsing History
• 2026-02-13: Malicious Chrome Extension Steals Meta Business Manager Exports and TOTP 2FA Seeds
• 2026-02-12: AiFrame”- Fake AI Assistant Extensions Targeting 260,000 Chrome Users via injected iframes
• 2026-01-28: Malicious Chrome extensions can spy on your ChatGPT chats
• 2026-01-27: Small Tools, Big Risk: When Browser Extensions Start Stealing API Keys
• 2026-01-27: Stanley — A $6,000 Russian Malware Toolkit with Chrome Web Store Guarantee
• 2026-01-27: Malicious Chrome Extension Performs Hidden Affiliate Hijacking
• 2026-01-26: How We Discovered A Campaign of 16 Malicious Extensions Built to Steal ChatGPT Accounts
• 2026-01-26: Chrome Extensions: Are you getting more than you bargained for?
• 2025-12-24: Silent Takeover: How Purchased Chrome Extensions Became Remote-Controlled Webpage Manipulation Tools
• 2025-12-15: 8 Million Users' AI Conversations Sold for Profit by "Privacy" Extensions
• 2025-12-01: 4.3 Million Browsers Infected: Inside ShadyPanda's 7-Year Malware Campaign

📊 Data Sources

The database is automatically updated by aggregating information from:

• Chrome extension monitoring services
• Security research blogs and publications
• Threat intelligence feeds

🗃️ Database Structure

Each extension entry includes:

• Extension ID - Unique Chrome Web Store identifier
• Name - Extension name
• Date Added - When the extension was added to this database

🎯 Usage

This database is intended for:

• Security research
• Extension vetting and analysis
• Building protective tools
• Threat intelligence

📁 Data Format