Browser extensions starting with C
2,037 browser extension security reviews, listed by name.
ChatTAB
andersdn11
LowChatTAB sends your OpenAI API key, org ID and recent chat messages to a third-party server in URL parameters.

Cluing - Shareable Notes on Web Pages
Ivan
LowCluing registers the URL and title of each page you visit and uploads per-paragraph reading activity to its servers.
ChatGPT Ad Blocker - Block Ads on ChatGPT & AI Chatbots
Shepherd
LowChatGPT Ad Blocker runs a content script on every website and applies hide/remove rules fetched from its own server every 6 hours.
Choose All Languages
Anaya Woods
MediumTabblar redirects visits to 14 brand sites to the developer's referral links, once per 24 hours per site.
Crelate AI Talent Assistant
Crelate Product Team
CleanCrelate AI Talent Assistant reads Gmail email and contact context and calls the user's Crelate instance for templates.
Chatboty
ext.user002
CleanChatboty adds WhatsApp Web tools and sends voice messages to a vendor speech-to-text API when you click Transcribe.
CFCA CryptoKit.Paperless.tycw Extension
CleanCFCA CryptoKit.Paperless.tycw Extension relays messages between CFCA/Genertec banking pages and a local smart-card signing application.
cashyo.com - Cashback, Coupons and Rewards
www.cashyo.com
Lowcashyo.com sends your full list of installed extensions to api.cashyo.com once a day.
CFCA CryptoKit.Paperless.WEGO Extension
mahaiwei19820223
LowCFCA CryptoKit.Paperless.WEGO Extension forwards page-supplied native host names and data to a local smart-card app without validation.
Cargo Express
Westpoints
LowCargo Express fetches shared Copart and IAAI buyer passwords from its backend and logs users into auction sites without showing them.
CFCA CryptoKit.NCWR Extension
CFCACryptoKit
LowCFCA CryptoKit.NCWR Extension relays messages from any page on localhost or 127.0.0.1 to its installed native application, unfiltered.
CFCA CryptoKit.changecloud Extension
changecloud
LowCFCA CryptoKit.changecloud Extension bridges its own web pages to a locally installed native application over Chrome's native messaging API.
Calculator Plus - Dark Mode & Keyboard
MediumCalculator Plus bundles the Mellowtel SDK, which loads server-chosen pages in hidden iframes after an opt-in.
Cars From USA Controller
Westpoints
CleanCars From USA Controller deletes Copart and IAAI login cookies when the Cars From USA extension is disabled or removed.
Chroma Color Picker
MediumChroma Color Picker bundles the Mellowtel SDK, which loads server-chosen URLs in hidden frames after an opt-in.
CFCA CertEnrollment.changecloud Extension
changecloud
LowCFCA CertEnrollment relays native-messaging commands from CFCA's own changecloud domains with no further validation.
Cars From USA
Westpoints
LowCars From USA logs Copart and IAAI lot activity and bids to its backend and signs users into shared auction accounts.
Cargo Express Controller
Westpoints
CleanCargo Express Controller removes Copart and IAAI login cookies when a companion extension is disabled or uninstalled.
Custom Aurora Background
CleanCustom Aurora Background requests your precise geolocation and sends the coordinates to OpenWeatherMap on every new tab.
Customer Service Helper with GPT-4 in Walmart
GPTDeveloper
CleanThe extension sends text you select on walmart.com (up to 500 characters) to findniche.com when you click Ask.
Cargo Express
MC development
CleanCargo Express fills shared Copart and IAAI logins from its server and reports your auction activity to it.
Connect Castle Solution
LowConnect Castle Solution adds WhatsApp Web customer-service tools and sends voice-note audio to hiperchat.com.br for transcription.
CG No Login Master - ChatGPT无法登陆特殊工具
letsmain
MediumCG No Login Master runs its popup script on every website visited, sending the page's origin and the user's IP to its vendor's server.
Canvas Hack Boost
VTR
CleanCanvas Hack Boost spoofs tab visibility and auto-fills Canvas quiz answers from the student's past submissions.
Carmover Controller
Westpoints
CleanCarmover Controller removes Copart and IAAI login cookies from the browser when the Carmover extension is disabled or uninstalled.
Cart Assistant for 1688 - One-Click Export (Independent Tool)
Jim
LowCart Assistant for 1688 uploads product listing data from shopping pages to index.aiprice.com while you browse.
ClockAssist Enterprise
ClockAssist
LowClockAssist Enterprise reports visited page URLs and titles to ClockAssist and accepts login tokens from any web page.
CFCA CertEnrollment.UnionPayIntl Extension
CFCACryptoKit
LowThe extension relays messages from unionpayintl pages to native host programs on the user's computer.
CFCA CryptoKit.Paperless.genesisfin Extension
simplexu
LowCFCA CryptoKit relays messages from genesisfin.net pages to any native messaging host named by the page.
ClearContext
gagandeepgutta · News & Weather
LowClearContext sends the full URL of every page you load to api.clearcontext.co to look up a news bias rating.
Convverso CRM - Transcrição de Áudios, Automação, Vendas no WhatsApp Web
hgsax
CleanConvverso CRM sends a WhatsApp Web voice message to hc-stt.hiperchat.com.br when you click 'Transcribe audio'.
CPR Enroll Agency Connect
hello
LowCPR Enroll Agency Connect runs server-supplied automation steps on certification tabs, some via OS-level synthesized clicks.
CG Entry Master - ChatGPT入口特殊工具
letsmain
LowCG Entry Master sends the user's email, access token, and IP address to its server in cleartext HTTP, embedded in the request URL.
ChatFlat: Chat with any flat of Idelista/AirBnB with AI
img2html
LowChatFlat sends your chat messages and Idealista/Airbnb listing IDs to api.img2html.com under a stored account token.
Conectadus CRM
lsawd
CleanConectadus CRM adds CRM tools to WhatsApp Web and sends voice messages and chat events to hiperchat.com.br servers.
CFCA CryptoKit.YiShang Extension
易商新程(杭州)有限公司
CleanCFCA CryptoKit relays messages from newpay800.com pages to a native host chosen by the page.
Canvas-Wise
flancast90
CleanCanvas-Wise reads every question and answer option on a Canvas quiz page and sends them to its own server to auto-fill answers.
Class Timer
AI Webcam Effects
LowClass Timer sends the active tab's hostname and your typed timer title to its own server whenever you start a timer.
Cloud Music Web Player
Jesse White
MediumCloud Music Web Player sets chromecrxstore.com as Chrome's default search provider, labeled 'Google'.
Crypto Donate Extension
Mateusz 'Bi3NioL' Bieńkowski
LowCrypto Donate Extension loads its settings over plain HTTP and uses the contract address from them as an ERC-20 approval spender.
Cart Tracker
Stebin George
LowCart Tracker reads your drugcomparison.co.uk account name and order items and sends them to an Azure backend.
Chat Power
LowChat Power adds WhatsApp Web automation and sends voice messages to hiperchat.com.br for transcription when clicked.
ClickDoc VA-2
LowClickDoc VA-2 sends nurse note text from netsmartcloud pages to OpenAI using a hardcoded API key.
CoCounsel to PDF: Export CoCounsel Chats to PDF, Markdown, JSON
Neo Cortex
LowCoCounsel to PDF sends the full rendered chat page to its own cloud backend to build PDF exports.
CFCA CertEnrollment.JYBank Extension
CFCACryptoKit
LowCFCA CertEnrollment.JYBank lets bank-site pages send commands to a local native messaging host.
CFCA CryptoKit.BDBank V3 Extension
baodingbank
LowCFCA CryptoKit relays messages between vendor web pages and a local native application on your computer.
CFCA CryptoKit.HUAIHE-ENERGY Extension
CleanCFCA CryptoKit lets listed signing web pages pass messages through to a native certificate host on the computer.
Carload Controller
MC development
CleanCarload Controller clears Copart and IAAI session cookies and closes auction tabs when the Carload extension is removed.

ClickLearn Authoring Tools
ClickLearn
LowClickLearn Authoring Tools relays page messages to the ClickLearn desktop app over a local WebSocket.
Copy Ninja
lauri.iivarinen
CleanSave frequently used text and links so they can be copied to the clipboard quickly.
CFCA CryptoKit.DBS Extension V3
LowCFCA CryptoKit relays messages from DBS bank web pages to a local CFCA native messaging host.
CFCA CryptoKit.YZZG Extension
云筑智港(天津)科技有限公司
CleanCFCA CryptoKit lets pages on yzzg.tech open a native messaging connection to a named desktop host and relay JSON to it.
Canto-HubSpot Connector
The DAM Consultants LLC
LowCanto-HubSpot Connector sends its installed version to its vendor's server and shows server-supplied update notices on HubSpot pages.
CardVault
LowCardVault stores payment cards and lets any *.vercel.app page trigger its automated card-change flow and read visited-site names.
CashBack Manager FR
accentweb.fr
CleanCashBack Manager FR sends the first hostname label of each tab you visit to four cashback search services.
Clean for LinkedIn
hello
MediumClean for LinkedIn hands its own web app your LinkedIn session cookie on request.
Cresça & Apareça CRM
ext.user003
CleanCresça & Apareça CRM adds a WhatsApp Web CRM layer and sends a clicked voice note to hc-stt.hiperchat.com.br for transcription.
chăm sóc sinh viên
LE HONG SON
CleanThe extension opens background tabs on gv.poly.edu.vn and reads student records for a user-supplied list of student codes.
CFCA CryptoKit.SecB Extension
CFCACryptoKit
CleanCFCA CryptoKit.SecB lets cfca.com.cn pages open a native messaging connection and relay messages to a local host.
CFCA CryptoKit.TengCloud Extension
kxdy22
CleanCFCA CryptoKit.TengCloud Extension relays messages from perfectsign.com.cn pages to a local native messaging host.