This Chrome extension contains malware: if you used it like me, remove it immediately!

We often rely on small tools to integrate into the browser to simplify our daily web activities, especially during working hours.

Among these, the extension “Save as Image Type” had carved out a significant space on the workstations of many professionals and enthusiasts, including mine.

Its function was as simple as it was essential: it allowed to bypass newer image formats, such as the not always supported WebP, enabling you to save online graphics found on the web in the more traditional and versatile formats PNG or JPEG.

Unfortunately, this convenience has suddenly given way to concern. In recent hours, Google Chrome has started showing a security warning, disabling the extension due to the presence of malicious code inside it.

“Save as Image Type”, the Chrome extension contains malware

The deactivation is not an isolated case or a browser error. Numerous users have started experiencing the same block on their devices.

Direct testimonies, such as that of Aamir Siddiqui from Android Authority, find broad corroboration in numerous recent discussions appearing on Reddit, where a multitude of people are sharing the same troubling experience.

Delving into the issue, an interesting detail emerges that could have served as a warning: some older discussions suggest that Microsoft Edge had already removed this specific add-on from its catalog about a year ago, effectively anticipating Google’s drastic action today.

The nature of the threat

What exactly is the danger posed by this extension? According to investigations by the community, the incriminated software does not seem to aim at destroying data on the hard drive, but at financial gain.

About two weeks ago, some particularly vigilant users noticed anomalous behavior while navigating well-known e-commerce portals, especially Amazon and Best Buy.

A Reddit user, identified by the pseudonym UtahJarhead, described the frustration arising from continual and inexplicable redirects. Trying to visit specific internal pages on Best Buy’s site, the system repeatedly redirected him to the homepage, an anomaly that disappeared instantly as soon as incognito browsing mode was activated.

Further analyses have highlighted how the extension would silently manipulate affiliate links to illicitly divert profits generated by purchases of unsuspecting users.

This is an unethical practice reminiscent of a case that emerged at the beginning of 2024. At that time, Honey, a well-known extension dedicated to automatically finding promotional coupons, was accused of siphoning affiliate revenue from third parties with very similar methodologies.

Viable Alternatives

If this specific extension is still installed on your computer, the action to take is one: remove it immediately from the browser.

To compensate for this shortcoming and continue downloading images in the desired format, the network offers several options. Many suggest an extension called “Save Image As JPG, PNG, WebP“, though it still requires thorough evaluations to confirm its absolute reliability in the long term.

Alternatively, “Save as Image Converter“ is proving to be a capable and functional substitute.