When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.

Researchers from SquareX said they spotted a malicious web app extension which at first, seems benign.

It can be an unassuming AI tool, or pretty much anything else.

HTTPS in a browser address bar

They are calling them polymorphic extensions and believe they are an entirely new class of malware.

They said the malware impacts most major browsers, including Chrome and Edge.

surfing app extensions present a major risk to enterprises and users today, commented SquareX founder, Vivek Ramachandran.

Google has been notified, but has yet to respond.