Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities

A malicious Chrome extension that was previously removed for scraping sensitive AI conversations managed to reappear on the Chrome Web Store, demonstrating a critical weakness in third-party software vetting and platform enforcement. The extension shifted tactics from outright data theft to a covert affiliate monetization scheme, showing how threat actors adapt to evade detection while maintaining a persistent presence. This matters because users who trust official distribution channels like the Chrome Web Store may install extensions believing they have been vetted for safety. The incident highlights how supply chain risks extend to browser ecosystems, where a seemingly benign update can introduce or reactivate harmful behavior at any time.