{
  "schema_version": "1.6.0",
  "id": "CLR-2026-2996",
  "modified": "2026-07-07T00:00:00Z",
  "published": "2026-07-07T00:00:00Z",
  "summary": "A Chrome extension that strips a site’s security headers to farm an AI service",
  "details": "The Chrome extension AutoHailuo (\"Auto send Hailuo prompts and download images/videos\") is a convenience automation tool for the Hailuo AI service. To do its job it uses declarativeNetRequest to remove Hailuo’s Content-Security-Policy, X-Frame-Options, COOP and COEP response headers in the user’s browser, drives the service programmatically, and routes prompts through a set of rotating vendor backends (autojourney.top / .ai / zeabur.app / kingback.app, with failover). Stripping a site’s security headers and automating it at scale is abuse of the third-party service, not a supply-chain attack on the installer. We classify it as Abuse tooling and reported it to the Chrome Web Store.",
  "affected": [
    {
      "package": {
        "ecosystem": "Chrome",
        "name": "AutoHailuo"
      },
      "versions": [
        "0.0.12.0"
      ]
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://research.codelake.dev/advisories/clr-2026-2996-autohailuo"
    }
  ],
  "credits": [
    {
      "name": "Sascha Klein, codelake Research",
      "type": "FINDER",
      "contact": [
        "https://research.codelake.dev"
      ]
    }
  ],
  "database_specific": {
    "caseId": "CLR-2026-2996",
    "kind": "abuse",
    "class": "Abuse tooling",
    "severity": "High",
    "status": "Confirmed abuse tooling",
    "iocs": {
      "ips": [],
      "hashes": [],
      "indicators": [
        "AutoHailuo — Chrome Web Store id akhjgnghknikbpimcmambmpklhegbjeo, v0.0.12.0",
        "declarativeNetRequest rules.json: modifyHeaders → remove Content-Security-Policy, X-Frame-Options, Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy on requestDomains hailuoai.com / hailuoai.video (main_frame, sub_frame)",
        "permissions: downloads, declarativeNetRequest, storage, notifications · host_permissions + content_scripts scoped to hailuoai.com / hailuoai.video only (inject.js world=MAIN, content.js)",
        "Rotating vendor backends with failover: apijourney.autojourney.top, apijourney.autojourney.ai, apijourney.zeabur.app, apijourney.kingback.app",
        "POST {backend}/api/translate/prompts, /api/midjourney/prompts, /api/email — body: prompt text + style params + user autojourney account e-mail",
        "NOT observed: cross-origin cookie/session theft, chrome.cookies use, or credential exfiltration — capability confined to hailuoai"
      ]
    }
  }
}