Suspicious 86% chrome 23 installs Download

Nomi: Product Team Assistant 2.2.2

Raw IP, broad permissions, low trust

“Nomi turns every new Chrome tab into a complete product workspace. Instead of a blank page or scattered bookmarks, you get a focused enviro…”

Browser extension forwards captured login credentials to a hardcoded remote hostOpenAI Chat Completions API endpoint
SHA-256638fab0cf43de0cc2edb25899efb0028b0c2e886efb47d5558a0c77c7fec63c9
URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dmagldpiolabolljehhdpklomiphcmbnb%26installsource%3Dondemand%26uc
MaleculeK₃(Am₃Li₄Te)O₁₂(Eu₂Al₂As₁₀C₁₀Ca₆Co₂DyEr₂I₅La₂S₆Xe₂)H₁₁(Br₁₁Cm₇₆Cr₇Db₅₃F₄Hf₅MgOs₉Po₁₁Ti₅U₂₅)Md₇(BkIn₇Pa₇Pm₈Pt)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.