Browser extensions starting with D
498 browser extension security reviews, listed by name.
demado
otiai10
Lowdemado stores a launched workflow ID and configuration in page sessionStorage that the opened site can read.

DF YouTube (Distraction Free)
RickyV
LowDF YouTube (Distraction Free) ships a hardcoded Mailgun API private key inside the extension package.
DESIGN.md Style Extractor - TypeUI
Bergside
CleanDESIGN.md Style Extractor - TypeUI reads active-tab page content and styles to generate local design markdown.
Daily Feast Recipe
Vanity Fair Media
LowDaily Feast Recipe sends recipe API requests with an embedded API key to api.spoonacular.com.
DailyBibleHub
carinalo902
LowDailyBibleHub includes a Spoonacular API key and sends recipe search requests from its new tab page to Spoonacular.
DailyFactTab
Diversify Media, Inc.
LowDailyFactTab sends new-tab fun fact requests to RapidAPI using a hardcoded API key.
DailyWorldAstrology
clairehong05
LowDailyWorldAstrology embeds a Spoonacular API key in its new-tab recipe requests to api.spoonacular.com.
DealCloud
dealcloudapps
LowDealCloud forwards web page messages from its Gmail proxy into extension background actions.
DeepSeek AI
SupaEasy
CleanAdds one-click browser access to a DeepSeek AI chat assistant for answers, writing help, coding support, and translations.
DeepShare: Export AI Chats as Word
CleanDeepShare sends selected AI chat or pasted Markdown content to its DOCX conversion API.
Detect Auto
Detect Auto
CleanDetect Auto reads focused text fields on every website and sends invoked rewrite prompts to Detect Auto and OpenRouter.
Dextension
Dext
LowDextension sends Dext profile and account analytics identifiers to Segment.
Do Browser: AI Browser Agent
Sawyer
CleanDo Browser sends active page context to its backend when quick-command typeahead is used.
Download YouTube Kids for PC, Mac And Windows
hellosuhel2334 · Entertainment
LowDownload YouTube Kids for PC, Mac And Windows uses a hardcoded default lock password and stores it locally.

Distract Me Not (website blocker)
AXeL
CleanDistract Me Not records visited URLs and block decisions in local trace logs when the user enables logging.
DMarket Trust Shield BETA
DMarket
CleanDMarket Trust Shield BETA sends Steam trade offer IDs to DMarket's plugin API for verification.
Dark Mode
ronnyzfx
LowDark Mode lets any page trigger extension-powered fetches for CSS and image URLs.
Desktop companion app for Dynamics 365 Contact Center
Microsoft Corporation
LowThe extension relays postMessage payloads from any HTTPS page to the com.dynamics.vca native app without validating the sender's origin.
Download History
CleanDownload History exports your Chrome browsing history to a local CSV file when you click its download button.
Download Twitter Spaces
atmos · Tools
CleanDownload Twitter Spaces sends Space download details, IP geolocation, and a persistent user ID to a Replit webhook.
Dyslexic Browser
Foureyed Jimmy · Accessibility
MediumDyslexic Browser sends its stored client ID to db.foureyedjimmy.com over plaintext HTTP for subscription checks.
d-party
U-NOT
Cleand-party sends dAnime watch-party profile and playback details to d-party.net over WebSocket.

Daily Top Coupons & Custom Web Search
DailyTopCoupons
CleanDaily Top Coupons & Custom Web Search sets Yahoo as the default search and sends search terms to Yahoo affiliate URLs.
Dark Mode for Chrome – Simple Reader & Eye Protection Theme
carlosjhein
LowDark Mode for Chrome exposes a page-visible DOM marker that websites can use to detect the extension.
Dark Reader for Chrome
Dark dev.
CriticalDark Reader for Chrome sends update data to dark-reader.com and applies server-provided programs in its service worker.
DemandScience Chrome Extension
sigstr-chrome-store
CleanDemandScience Chrome Extension sends Gmail sender and recipient email addresses to sigstr.net for campaign banners.
Demon Slayer Shinobu Kocho Wallpaper
flora.nyra · Fun
MediumDemon Slayer Shinobu Kocho Wallpaper sends Chrome top-sites URLs to Google's favicon service on the new-tab page.
DesModder for Desmos
Jared Hughes
CleanDesModder for Desmos sends Desmos graph activity to WakaTime when its optional integration is enabled.
DesignHub
FIRE ARC TECHNOLOGIES LTD
MediumDesignHub sends omnibox suggestion queries to its suggestions server over cleartext HTTP.
Docutracks Signer
dataverse.gr
LowDocutracks Signer exposes a native signing bridge on all pages, letting any page script trigger a signing operation via a CustomEvent.
Dog Cuties
Apex Media
HighDog Cuties sends new-tab search queries to dogcuties.com before showing results.
Dolby Voice
Dolby Laboratories
LowDolby Voice 1.1 relays web page postMessages to a native messaging host with no origin or payload sanitization.

DesignHub
Firearc Technologies Ltd.
MediumDesignHub sends typed omnibox search terms to suggesting.designhubapp.com over unencrypted HTTP.

Default Search with Anthropic
benmerry
MediumThe extension removes Claude's malicious-prompt caution banner on claude.ai pages.

Download with Free Download Manager (FDM)
Joe Ertaba
CleanDownload with Free Download Manager sends download URLs and referrers to its local native client.
DA PA Checker
Harpreet Kumar
CleanDA PA Checker sends the active tab's domain with a persistent device token to its domain-check API.
DNS Lookup
whatsmydns
CleanDNS Lookup sends the active tab hostname to whatsmydns.net for automatic DNS lookups.
Daily Weather Forecast
boticariocrm · News & Weather
LowDaily Weather Forecast sends visited site domains to apicdn.co and uses its responses to redirect matching link clicks.
DesktopHut Live Wallpapers Tab Pro
shelloux
LowDesktopHut Live Wallpapers Tab Pro sends bookmark domains to third-party favicon services on the new-tab page.
DevTools for D365F&O
Devanalytic365
CleanDevTools for D365F&O lets Dynamics pages request a visible-tab screenshot and receive the cropped image.
Dictionariez: Your Dictionary, Your Language
River · Education
LowDictionariez lets visited pages send supplied text to pnl.dev through its translation bridge.
Directors Desk SecureView
Directors Desk - Secure View
LowDirectors Desk SecureView bridges document links on directorsdesk.com to a local native viewer, forwarding a hardcoded key seed bundled in the extension.
Docs Offline
Suijin
MediumDocs Offline sends pasted text, page details, quiz content, and page images from all sites to ClipKey servers.
Doodle Jump
doodlejump
LowDoodle Jump allows notifications from digitalgamedoo.com and opens that site when installed.
Double Subtitles for Prime by MovieLingo
movielingo.app · Education
CleanDouble Subtitles for Prime sends Prime Video and Amazon subtitle text to Google Translate for second-subtitle display.
Dragon Ball Super: Broly Wallpaper
ongmason
LowDragon Ball Super: Broly Wallpaper sends your most-visited site URLs to Google's favicon service on each new-tab page.
Drift Email
CleanDrift Email rewrites tracked Gmail links and sends recipient, subject, and Gmail message details to Drift.

Dark Mode - Night Eye
Night Eye
LowDark Mode - Night Eye lets any website trigger support messages sent with stored chat identity details.

DanfeOnline - Gerador de DANFE
DanfeOnline
CleanDanfeOnline - Gerador de DANFE retrieves Fazenda invoice pages and XML through www.danfeonline.com.br.

DjVu.js Viewer
RussCoder
LowDjVu.js Viewer lets any website trigger extension-privileged DjVu loading and render cross-origin documents into the page.

Download Facebook Videos
pbion.com
LowDownload Facebook Videos rewrites Facebook and fbcdn request headers for requests started outside Facebook.

Dualsub - YouTube Subtitle Translator
Dualsub Studio
CleanDualsub sends selected subtitle dialogue chunks and an optional API key to api.dualsub.xyz for translation.
Dark Mode for YouTube™
Free Software Utilities
LowDark Mode for YouTube™ exposes its extension ID and resource base URL to YouTube page scripts.
DataDID
memolabsio
CleanDataDID reports aggregate active-tab domain and category counts while mining mode is enabled.
Delete Facebook Messages
Lynx · Social & Communication
LowDelete Facebook Messages removes Facebook Content-Security-Policy headers on page and XHR responses.
Demandbase for Sales
Demandbase Inc
LowDemandbase for Sales lets any HTTPS page ask the extension to open an attacker-chosen URL in a new tab.
Depth Translator for DeepL
Faisal Ahmed
CleanDepth Translator for DeepL sends selected page text to DeepL translator URLs when you ask it to translate.
Devyce Softphone Extension
Devyce
CleanDevyce Softphone Extension sends clicked phone numbers and CRM page context to softphone.devyce.io.
Discord Token Login
discordkit
CleanDiscord Token Login passes a Discord token through the page URL and writes it into Discord localStorage.
Discord Translator Pro - Immersive Bilingual Chat Translation
Ivan · Social & Communication
CleanDiscord Translator Pro sends Discord message and draft text to the selected translation provider.