JSON

A Chrome browser extension called Polymarket finder, with extension ID lehpb...alfila, has been flagged with a cybersecurity risk score of 98 out of 100, indicating it is likely malicious. The warning comes from a security-focused account in the infosec community, which says anyone with the extension installed should remove it and review browser security.

A Chrome browser extension called Roadanalyzer Baccarat Roa has been flagged as malicious, receiving a cybersecurity badness score of 98 out of 100. The extension, identified by ID jphoepmhpmbmlcimkeiihcddgabohkan, appears gambling-related, and security observers are warning others to avoid installing it and to check whether they already have it.

The Chrome browser extension Swift Shortcuts has been flagged as likely malicious, receiving a cybersecurity risk score of 91 out of 100. The warning is circulating among security researchers on Mastodon, who caution that the extension may pose a threat to anyone who has it installed. Users are advised to review their installed extensions and remove any flagged as dangerous.

A Chrome browser extension called Chromegpt For Chatgpt is being flagged as malicious after receiving a cybersecurity risk score of 95 out of 100. The warning is spreading among security-minded users, who are cautioning others against installing extensions that request access to ChatGPT or browsing data without a verified track record.

A Chrome browser extension called Gachiakuta Live Wallpaper has been flagged by an automated security scoring service with a risk score of 87 out of 100, indicating it is likely malicious. Cybersecurity observers are sharing the warning so users remove the extension and avoid installing it.

Security researchers are warning about the Chrome browser extension EasyFind, which received a cybersecurity risk score of 96 out of 100, indicating it is likely malicious. The warning was shared among infosec communities, advising users to check whether the extension, identified by its Chrome Web Store ID, is installed on their browsers and to remove it if found.

The Chrome extension Zentos, published under the ID ojopbahcpbdegflnmocbkmcdgfkeppll, has been flagged as likely malicious with a cybersecurity risk score of 87 out of 100. Security observers are warning users to avoid installing it and to remove it if already present, as such scores typically indicate suspicious permissions, data collection, or other unsafe behavior.

The Chrome browser extension Quick Navigator is being flagged as potentially malicious, with an automated cybersecurity risk score of 91 out of 100. Security observers are warning users to be cautious of the extension, identified by its Chrome Web Store ID, and to avoid installing or remove it from their browsers while the warning circulates.

The browser extension Easy Trip Finder, distributed through the Chrome Web Store, has been flagged with a cybersecurity risk score of 99 out of 100, marking it as highly likely to be malicious. Security observers are warning users to avoid installing it and to review any extensions already added to their browsers.

A security bot has flagged the Chrome browser extension omgPETS! as malicious, assigning it a maximum cybersecurity risk score of 100 out of 100. The extension, identified by its Chrome Web Store ID bloaebioklphbgkajacehnoaicgndooj, is being shared as a warning in cybersecurity circles so users can check for and remove it.

The Chrome extension 'Search and New Tab by AOL' has received a cybersecurity risk score of 99 out of 100, marking it as highly likely to be malicious. The flag is being shared among security-focused users, who warn others to remove or avoid the extension. The extension's ID is djhefbpeamjjlnpdjmalgpgjbnjeilpd, and it is unclear whether AOL itself is responsible or whether the listing has been compromised or is an impersonation.

A Chrome browser extension called Search Manager is being flagged as malicious, with an automated cybersecurity risk score of 97 out of 100. Security observers are warning users to remove or avoid the extension, identified by the ID anjmlknodakgoomjeifkbcfbcpgonefk, while it remains potentially available in the Chrome Web Store.

The Chrome browser extension DeskScape Player has been flagged with a cybersecurity risk score of 89 out of 100, marking it as likely malicious. Users are being warned to avoid installing the extension and to remove it if it is already present in their browser. Security watchers are sharing the alert to raise awareness of risky add-ons in the Chrome Web Store.

A cybersecurity warning is circulating about the Chrome extension 'Incognito Search Helper' (ID: iiacojpoloobeeibmnlihiodpiijghln). It has been given a risk score of 99 out of 100, indicating a high likelihood the extension is malicious. Users are being urged to check whether the extension is installed in their browsers and remove it if found.

A Chrome browser extension called Safe Search Pilot is being flagged as potentially malicious, with a cybersecurity risk score of 85 out of 100. Security-focused users are warning others to avoid installing it and to review any extensions already added to their browsers.

A Chrome browser extension is being flagged as likely malicious after receiving a cybersecurity risk score of 96 out of 100. The extension, listed only as 'Unknown Name', carries the identifier hjflmcpnddmankddpidnlfiepmfkpaha. The warning is circulating among security-focused communities, which routinely highlight poorly named or suspicious extensions that may pose risks to users' browsing data and security.

The Chrome extension 'Bmw M4 Live Wallpaper' (ID inoifnccigflncehnlbbiagmnhhlmokg) has been given a maximum 100/100 maliciousness score by an automated cybersecurity assessment shared on Mastodon. The warning suggests the browser add-on poses a serious security risk, and users are being urged to remove it and avoid installing similar wallpaper-themed extensions.

Security researchers are warning about the Chrome browser extension Koi Pond Bridge Live Wall, which has received a maximum malware risk score of 100 out of 100. The extension, identified by the ID djmobjlfiopkemkafgoabmieabnkbkhd, is being flagged as malicious, and users are being urged to remove it from their browsers.

A Chrome browser extension named 'Porsche 911 Tokyo Drift L' is being flagged as fully malicious, with a cybersecurity risk score of 100 out of 100. Users are being warned to avoid or remove the extension, identified by the ID hhmdlgcklbkjdhdfbfdefbnloiklmbdd, from their browsers.

A cybersecurity check has flagged the Chrome extension Yacrm Turbo El Mejor Crm as likely malicious, giving it a risk score of 87 out of 100. The browser add-on, aimed at CRM users, is being shared as a warning to anyone who may have installed it. Security observers advise removing flagged extensions and reviewing browser permissions.

A Chrome browser extension called Luffy In Gear 5 Live Wall, themed on the anime character Luffy's Gear 5 form, has been flagged as malicious with a cybersecurity badness score of 91 out of 100. The warning suggests the popular-appearing wallpaper extension may pose a security risk to users who install it in their browsers.

A cybersecurity report flags the Chrome extension Cinnamoroll Live Wallpaper as potentially malicious, giving it a risk score of 87 out of 100. The warning, shared by a security-focused account, urges users to review their installed extensions. High risk scores like this typically indicate dangerous behaviors such as data harvesting or unwanted permissions, though no specific malicious actions were detailed in the report.

A Chrome browser extension named Cinnamoroll Live Wallpaper is being flagged as potentially malicious, receiving a cybersecurity risk score of 93 out of 100. Security researchers warn users to avoid installing it and to remove it if already present, as wallpaper-themed extensions are a common vector for browser hijacking and data collection.

A newly disclosed vulnerability, CVE-2026-42589, affects ExifTool, the widely used tool for reading image metadata. Attackers can inject ExifTool arguments through unsanitized metadata keys — inserting newlines into a JSON key lets them inject the -if argument and execute arbitrary Perl code. The flaw carries a high CVSS score, prompting warnings for users to patch promptly.