A Chrome extension with approximately 100,000 users has been caught silently exfiltrating full AI chat conversations to a remote server, even when users never interact with the extension’s core feature This article explores chatgpt_context_fetch_diagnostics js hijacks. . The extension, listed on the Chrome Web Store under ID aajjgdpofhhcjmjoombjdfepplndhgcp, claims to be a tool for rewriting user prompts to improve AI outputs and is marketed as working across ChatGPT, Claude, Gemini, Grok, Meta AI, DeepSeek, Perplexity, and Copilot.
The extension’s true engine is a 98 KB file misleadingly named “chatgpt_context_fetch_diagnostics.js,” which hijacks core browser networking primitives window.fetch, XMLHttpRequest’s open and send methods, and WebSocket to intercept traffic on all nine supported AI services regardless of transport type (fetch, XHR, or WebSocket).
A hardcoded configuration file forces three internal flags to "agreed," collection to "on," and data protection to "off" every time the background worker starts, with these values being rewritten on every site-wide page load. Security teams should block the extension ID via ExtensionInstallBlocklist policies in Chrome and Edge, monitor for outbound traffic to secondbrain[. ]is domains, and treat any enterprise Microsoft 365 Copilot exposure as a potential data-exfiltration channel rather than a routine consumer privacy issue.
