Google Disables Popular Chrome Extension for Malicious Code

Google has disabled a popular Chrome browser extension called "Save Image as Type," affecting more than one million users worldwide, after discovering it contained malicious code. The extension, which enabled users to right-click and save web images in formats such as PNG, JPG or WebP, was removed from the Chrome Web Store, with notifications sent to those who had it installed.

The tool had been a go-to solution for overcoming browser limitations on image downloads, particularly when websites restricted saves to less compatible formats like WebP. Prior to its removal, it boasted over one million installations, more than 1,700 user reviews and an average rating of 4.2 out of five stars. Users reported the sudden disablement occurring without prior warning, prompting discussions on platforms like Reddit where some expressed frustration over losing a daily utility.

Security researchers and community investigators determined that the extension's code included hidden functions unrelated to image conversion. Specifically, it injected affiliate links into users' browsers by loading invisible iframes that swapped out legitimate tracking codes for the extension's own ones. This...