ExterminAI - Malicious Extension Detector

Continuous protection for your extensions: auto-scans, permission alerts, malicious-DB matches, and email notifications.

ExterminAI Extension is a free browser security tool that protects you from malicious Chrome extensions. It scans your installed extensions against the ExterminAI malicious extensions database - a continuously maintained collection of known harmful extensions sourced from security researchers and threat intelligence reports - and optionally links to your ExterminAI account for continuous monitoring, real-time email alerts, and a security dashboard. Instant Manual Scanning Open the popup at any time to see a full list of every extension installed in your browser, complete with its name and unique extension ID. Hit the Scan button to instantly cross-reference your list against the database. Results appear in seconds - each extension is clearly labelled as CLEAN or MALICIOUS. Any flagged extension includes a direct link to the original threat report, so you can read exactly why it was flagged and make an informed decision. One-Click Removal If a malicious extension is detected, you do not need to go hunting through Chrome settings to remove it. ExterminAI Extension surfaces a Remove button directly on the flagged entry. Click it, confirm Chrome's prompt, and the extension is gone - all without leaving the popup. Flexible Automatic Scanning You are in full control of how and when your extensions are monitored. From the popup, choose your preferred auto-scan schedule: - Every 12 hours - for users who want frequent, near-real-time protection - Daily - a solid default for most users - Weekly - a lighter touch for those who install extensions infrequently - Monthly - a periodic check for minimal disruption - Disabled - if you prefer to scan manually on your own terms Background Monitoring with Badge Alerts When auto-scan is enabled, ExterminAI Extension runs silently in the background on your chosen schedule - no popups, no interruptions. If a threat is found, a red badge appears on the extension icon in your toolbar, letting you know something needs your attention the next time you glance at your browser. Open the popup to see what was found and when the scan ran. The badge clears automatically once you open the popup. Permission-Change Detection ExterminAI Extension watches for silent permission escalations. When an installed extension auto-updates and quietly grants itself new permissions you never approved - access to your tabs, cookies, browsing data, or every website you visit - ExterminAI flags it on the toolbar badge and surfaces a permission-change alert in the popup. You see exactly which permissions were added, what versions the change happened between, and can dismiss the alert once you have reviewed it. Optional: Link to Your ExterminAI Account Sign in from the popup to link the extension to your ExterminAI account. This unlocks a security dashboard at exterminai.com where you can: - See your complete extension inventory across every device you have linked - Get a permissions-risk profile for every installed extension - Browse a history of every deep scan you have run - Receive real-time email alerts for permission changes, removed extensions, newly-detected suspicious patterns, and known-malicious matches - Configure which alert types you receive, where they go, and how often - Manage and revoke linked devices independently Deep-Scan Analysis on the Web Dashboard For any extension you want a deeper analysis of, the ExterminAI website runs a sandboxed deep scan - combining static ML analysis, dynamic behaviour observation in an isolated browser, network IOC checking, and VirusTotal cross-reference. Suspicious patterns like cookie exfiltration, dynamic eval(), script injection, and unrecognised network calls are surfaced in a detailed report. Used together with the extension, you get an end-to-end view of every extension's behaviour, not just its identity. Privacy ExterminAI Extension works without an account. Anonymous use keeps your installed-extension list entirely local - nothing is uploaded, shared, or logged. The only external request made is fetching the publicly available malicious extensions database to compare against. If you choose to link the extension to an ExterminAI account, your installed- extension inventory is synced to your account so the dashboard can show it. Inventory data is scoped per user, transmitted only over HTTPS, and never shared with third parties. You can unlink the extension and delete the synced data at any time from the Account page.