A Chrome extension that was removed after allegations of stealing AI chat conversations has returned to the Chrome Web Store. According to Netskope Threat Labs, the same extension—known as the AI Sidebar extension “AI Sidebar with DeepSeek, ChatGPT, Claude and more”—is again reaching enterprise users, this time with activity Netskope describes as malicious in a different way.
Google pulled the extension from its store in January 2026 following reports that it scraped conversation content from AI services and then sent that data to external domains. Netskope says the extension later stopped showing that behavior in updated builds, but it did not stay quiet for long.
How the AI Sidebar extension returned
Netskope reports that the extension is back in circulation and is being delivered to browsers through Google’s own CRX distribution infrastructure. As of August 2026, the extension is active again on the Chrome Web Store, and updates are reaching corporate endpoints.
Before its earlier removal, the extension reached substantial reach: Netskope notes it had more than 300,000 installs and a 4.6-star rating on the Chrome Web Store. That history matters, because an extension that is already widely installed can be updated en masse once it regains distribution.
What happened before: conversation scraping claims
In December 2025, OX Security flagged the extension for allegedly scraping ChatGPT and DeepSeek conversation content and transmitting that information to external domains. That conduct was the basis for Google’s later removal in January 2026.
Netskope adds that the privacy policy now references the earlier behavior. In other words, the extension’s documentation appears to acknowledge the kind of activity that led to the ban—even if later builds showed less of the original scraping behavior.
New update behavior: an affiliate flow tied to releases
While Netskope characterizes the affiliate scheme as less immediately dangerous than the earlier chat theft allegations, it still raises red flags. Netskope says the extension’s newer updates include a monetization mechanism built around update and uninstall events.
In the versions Netskope observed, the extension’s functionality looked clean at first. Netskope highlights version 1.7.2.0, distributed between July 20 and July 31, 2026, which appeared designed to establish a trustworthy update history.
Roughly two weeks later, version 1.7.3.0 followed. Netskope describes it as a relatively small change: a “surgical” addition to a single script file, spanning 21 lines.
Updates open a new foreground affiliate link
Netskope explains how the update trigger works. When Chrome reports that the extension has updated, a service worker launches an affiliate link in a new foreground tab. The link then routes through a URL shortener to an AI video-generation platform that uses a public affiliate program.
Code comments reportedly specify that the trigger should run on update rather than on initial install. Practically, this means every future release can be tied to a fresh referral, rather than a one-time payout.
Uninstall exploitation: forcing referrals when users remove it
Beyond update-driven monetization, Netskope says the extension also targets the uninstall path. The reported technique leverages a Chrome behavior where only the most recently registered uninstall URL fires.
According to Netskope, the extension overwrites the legitimate uninstall URL about five seconds after the code loads. That timing aims to ensure that when a user removes the extension, the referral still triggers—turning deinstallation into another opportunity to generate commissions.
Attribution and storefront deception signals
Netskope points to developer and ownership details that raise additional concerns. The extension’s internal files reportedly list Extchange.com as both the developer and the data controller. Netskope also notes that the domain was registered in February 2024 and that there is no public registrant information available.
Meanwhile, Netskope says the Chrome Web Store listing falsely shows the developer name as “DeepSeek AI.” Using a brand-like identity that doesn’t match the files inside the extension is a common tactic in low-trust distribution schemes.
Enterprise delivery and detection notes
Netskope says it detected and blocked version 1.7.3.0 arriving at enterprise endpoints through Google’s CDN. It classified the activity as Trojan.GenericFCA.Script.37952.
Before publishing its findings, Netskope reportedly contacted and reported the extension to the Chrome Web Store. The security firm’s recommendation to organizations is straightforward: remove the extension from managed systems.
Why this case matters for organizations
Even though Netskope frames the affiliate mechanism as lower-stakes than the original conversation scraping allegation, the underlying lesson is the same. A browser extension can regain distribution after enforcement actions, and the risk may evolve over time.
Here, Netskope warns that the same distribution channel could deliver a more harmful payload in a future update. For IT and security teams, this highlights the value of extension allowlisting, routine inventory checks, and rapid response when suspicious extensions reappear.
What you can do now
If your organization allows third-party Chrome extensions, consider the following practical steps:
- Remove the AI Sidebar extension from user devices, especially managed endpoints.
- Review extension inventory and block or restrict items that show deceptive developer information or unusual update behavior.
- Monitor for extension updates delivered through standard distribution routes, not only direct downloads.
- Apply endpoint protections and investigate alerts tied to suspicious scripts or service worker behaviors.
In short, Netskope’s findings show how quickly extension threats can change—sometimes shifting from data theft to monetization triggers, while still maintaining a pathway for updates that can reach many users at once.
Conclusion
The AI Sidebar extension has returned to the Chrome Web Store after being pulled for alleged AI chat scraping. Netskope Threat Labs reports that newer versions replace or supplement the earlier activity with an affiliate-driven mechanism tied to update and uninstall events, while enterprise endpoints continue to receive updated builds.
For organizations, the safest response is to treat the extension as untrusted and remove it promptly, while strengthening controls that govern which browser extensions users—and machines—are allowed to run.
