Magic Actions for YouTube, a 1M+ user Chrome extension, was flagged as malware by Chrome despite being clean in Google Search Console and Safe Browsing. Investigation revealed an AI vendor (ExodiaLabs) on VirusTotal hallucinated a false security threat, which automated systems ingested and propagated to trigger client-side enforcement and account suspension.