Browser extensions starting with C

ChatGPT to PDF sends the ChatGPT conversation HTML to chatgptpdf.tech when you click its save button.

Chatgpt Unblocked routes chatgpt.com and any site you add through fixed proxy servers using one hardcoded login shared by all installs.

The extension sends Taobao, Tmall, 1688 and Pinduoduo links on any site to cashback.gobiz.dev and rewrites them with tracking URLs.

The extension rewrites Taobao, Tmall, 1688 and Pinduoduo product links on every page to URLs returned by cashback.gobiz.dev.

The extension rewrites Taobao, Tmall, 1688 and Pinduoduo product links on every page through a cashback shortener.

Circle of Trust sends the URL of each completed tab on its meeting-site hosts to mymosttrusted.net.

Calculator Extension redirects visits to server-listed sites and rewrites clicked links through a remote-chosen URL.

Shipline.vn rewrites Taobao, Tmall and 1688 item links on any page into short URLs from cashback.gobiz.dev.

Generates AI comment suggestions for LinkedIn posts based on the user’s profile, tone, and settings.

CaseSnappy Summarizer renders its AI-generated case summary and error messages into the popup via innerHTML without sanitizing them.

Creator Insights sends TikTok creator and video data you browse to www.kolsprite.com.

Cents Per Point Calculator ships an unused test file containing a hardcoded Hilton session token, but nothing in the extension loads it.

CFCA JJCCB V3 Extension bridges four Chinese bank sites to a local PKI native host, reachable over unencrypted http:// too.

CUSTOM CURSOR reads your Facebook name, ID, emails and phone numbers and sends them to app.mysocial360.com.

Carmover fills shared Copart and IAAI logins fetched from its own backend and logs bids and your IP address.

The extension sends your Paramount+ account email, country and ID to its own servers and runs server-issued data-collection commands.

Claude to PDF uploads the rendered AI chat page HTML to its Cloud Run backend when you export a chat to PDF.

Coding Solutions Version Invisible reads page text and a screenshot on Ctrl+Shift+Y and sends them to its AI backend.

cashback.pt sends a list of all your installed extensions to its servers every 24 hours.

Clyck List reads your LinkedIn session cookies and sends them to its own backend to replay your login.

ChatShopee sends text you select on Shopee pages to findniche.com to generate AI replies.

CRM NaKanikuly Assistant stores your CRM session token and answers page messages with saved tour-operator logins.

Canvas Hack Pro overrides focus and visibility checks on every web page so quiz tab-switch monitoring does not register.

CFCA CertEnrollment.CRBank Extension relays crbank.com.cn page requests to a native messaging host with no in-handler sender check.

Console Poly sends the class roster and attendance record to a Google Form and its own server on every attendance submission.

Carex Auto sends Copart and IAAI login usernames, with IP and location, to auctiongate.io for guest users.

Chegg Expert Answer Link Finder sends the popup's rendered Chegg answer list and expert ID to vipsolutions.in.

Caribbean Stud Poker sends a persistent user ID to its server and renders server-returned HTML in the game popup.

The senvina.net ordering tool reads product and shop pages you browse on Asian marketplaces and uploads them to its servers.

The extension rewrites Taobao, Tmall, 1688 and Pinduoduo product links on any page to tracked cashback links from its own servers.

CFCA CertEnrollment relays messages from a narrow set of internal addresses to a local PKI app without validating the command.

CFCA CryptoKit relays a caller-named native messaging host and payload to it, with no allowlist check.

The extension rewrites product links on every page and sends marketplace product and shop data to the vendor's servers.

Copy Text from Videos sends the page URL and the text you copy via OCR to its own server.

ChatGPT to PDF uploads the full conversation HTML, page URL and title to its own backend for each PDF export.

Copy Dropdown Lists rewrites clicked outbound links on any page into api.aiprice.com affiliate redirects.

C2C Softphone sends dialed numbers' geolocation lookups to Radar and calls to its own phone API using a hardcoded key.

COOKmate sends every cookie for the active tab's site, plus its URL, to www.cookmate.online.

CFCA CryptoKit.TRTCW Extension relays native-messaging commands for any page matching one of four bare IP addresses, not a vendor domain.

Claude to PDF uploads the full rendered chat page to the vendor's cloud backend to generate each PDF export.

Vnlog.vn order tool rewrites Taobao, Tmall, 1688 and Pinduoduo links on every page to tracked URLs from cashback.gobiz.dev.

CFCA CryptoKit connects to any native-messaging host that sinotrans.com or y2t.com pages name, with no host allowlist.

The extension scrapes marketplace product and shop pages you browse and uploads them to its operator's servers.

Coca Cola MeaVana removes CSP and frame-blocking headers from responses on every site you visit.

Citrix Secure Access (Canary) periodically sends browsing history and device/user telemetry to a Citrix-controlled endpoint.

Click to component listens for window messages with no origin check, letting any page script redirect its next clicked-source URL.

Carload fetches shared Copart and IAAI buyer logins from its own server and signs the user in automatically.

Cdisount image search accepts forged page messages that trigger image uploads and tab opening.

Contest Creator collects Facebook commenters, reactors and sharers from posts and uploads them to its own backend.

o247.vn ordering tool rewrites Taobao and 1688 product links on every page into vendor cashback links.

The extension lets any page on broaderway.com.cn tell it which native messaging host to connect to, instead of enforcing one fixed host.

Colour Ninja extracts colours and gradients from web pages and sends usage analytics to Google Analytics.

CLIFL (YTMonster) sends your signed-in YouTube account email or handle to clifl.com with each request.

Christmas Eve - Slot Machine sends your Google profile to its game backend when you click sign-in.

Coding Solutions Version Invisible sends the active page's text and a screenshot to the vendor's servers when Ctrl+Shift+Y is pressed.

Canvas Open hides tab-switch events from Canvas quizzes and can send quiz questions to AI providers using your own API key.

CIRA sends the URL of each page you finish loading on its permitted sites to mymosttrusted.net.

CallSwitch One Click to Dial turns phone numbers on pages into dial links and sends dialed numbers to provision.voipcp.com.

The extension rewrites Taobao, Tmall, 1688 and Pinduoduo product links on every page to vendor cashback links.