Browser extensions starting with D

498 browser extension security reviews, listed by name.

  1. demado

    otiai10

    Low

    demado stores a launched workflow ID and configuration in page sessionStorage that the opened site can read.

  2. DF YouTube (Distraction Free)

    RickyV

    Low

    DF YouTube (Distraction Free) ships a hardcoded Mailgun API private key inside the extension package.

  3. DESIGN.md Style Extractor - TypeUI

    Bergside

    Clean

    DESIGN.md Style Extractor - TypeUI reads active-tab page content and styles to generate local design markdown.

  4. Daily Feast Recipe

    Vanity Fair Media

    Low

    Daily Feast Recipe sends recipe API requests with an embedded API key to api.spoonacular.com.

  5. DailyBibleHub

    carinalo902

    Low

    DailyBibleHub includes a Spoonacular API key and sends recipe search requests from its new tab page to Spoonacular.

  6. DailyFactTab

    Diversify Media, Inc.

    Low

    DailyFactTab sends new-tab fun fact requests to RapidAPI using a hardcoded API key.

  7. DailyWorldAstrology

    clairehong05

    Low

    DailyWorldAstrology embeds a Spoonacular API key in its new-tab recipe requests to api.spoonacular.com.

  8. DealCloud

    dealcloudapps

    Low

    DealCloud forwards web page messages from its Gmail proxy into extension background actions.

  9. DeepSeek AI

    SupaEasy

    Clean

    Adds one-click browser access to a DeepSeek AI chat assistant for answers, writing help, coding support, and translations.

  10. DeepShare: Export AI Chats as Word

    Clean

    DeepShare sends selected AI chat or pasted Markdown content to its DOCX conversion API.

  11. Detect Auto

    Detect Auto

    Clean

    Detect Auto reads focused text fields on every website and sends invoked rewrite prompts to Detect Auto and OpenRouter.

  12. Dextension

    Dext

    Low

    Dextension sends Dext profile and account analytics identifiers to Segment.

  13. Do Browser: AI Browser Agent

    Sawyer

    Clean

    Do Browser sends active page context to its backend when quick-command typeahead is used.

  14. Download YouTube Kids for PC, Mac And Windows

    hellosuhel2334 · Entertainment

    Low

    Download YouTube Kids for PC, Mac And Windows uses a hardcoded default lock password and stores it locally.

  15. Distract Me Not (website blocker)

    AXeL

    Clean

    Distract Me Not records visited URLs and block decisions in local trace logs when the user enables logging.

  16. DMarket Trust Shield BETA

    DMarket

    Clean

    DMarket Trust Shield BETA sends Steam trade offer IDs to DMarket's plugin API for verification.

  17. Dark Mode

    ronnyzfx

    Low

    Dark Mode lets any page trigger extension-powered fetches for CSS and image URLs.

  18. Desktop companion app for Dynamics 365 Contact Center

    Microsoft Corporation

    Low

    The extension relays postMessage payloads from any HTTPS page to the com.dynamics.vca native app without validating the sender's origin.

  19. Download History

    Clean

    Download History exports your Chrome browsing history to a local CSV file when you click its download button.

  20. Download Twitter Spaces

    atmos · Tools

    Clean

    Download Twitter Spaces sends Space download details, IP geolocation, and a persistent user ID to a Replit webhook.

  21. Dyslexic Browser

    Foureyed Jimmy · Accessibility

    Medium

    Dyslexic Browser sends its stored client ID to db.foureyedjimmy.com over plaintext HTTP for subscription checks.

  22. d-party

    U-NOT

    Clean

    d-party sends dAnime watch-party profile and playback details to d-party.net over WebSocket.

  23. Daily Top Coupons & Custom Web Search

    DailyTopCoupons

    Clean

    Daily Top Coupons & Custom Web Search sets Yahoo as the default search and sends search terms to Yahoo affiliate URLs.

  24. Dark Mode for Chrome – Simple Reader & Eye Protection Theme

    carlosjhein

    Low

    Dark Mode for Chrome exposes a page-visible DOM marker that websites can use to detect the extension.

  25. Dark Reader for Chrome

    Dark dev.

    Critical

    Dark Reader for Chrome sends update data to dark-reader.com and applies server-provided programs in its service worker.

  26. DemandScience Chrome Extension

    sigstr-chrome-store

    Clean

    DemandScience Chrome Extension sends Gmail sender and recipient email addresses to sigstr.net for campaign banners.

  27. Demon Slayer Shinobu Kocho Wallpaper

    flora.nyra · Fun

    Medium

    Demon Slayer Shinobu Kocho Wallpaper sends Chrome top-sites URLs to Google's favicon service on the new-tab page.

  28. DesModder for Desmos

    Jared Hughes

    Clean

    DesModder for Desmos sends Desmos graph activity to WakaTime when its optional integration is enabled.

  29. DesignHub

    FIRE ARC TECHNOLOGIES LTD

    Medium

    DesignHub sends omnibox suggestion queries to its suggestions server over cleartext HTTP.

  30. Docutracks Signer

    dataverse.gr

    Low

    Docutracks Signer exposes a native signing bridge on all pages, letting any page script trigger a signing operation via a CustomEvent.

  31. Dog Cuties

    Apex Media

    High

    Dog Cuties sends new-tab search queries to dogcuties.com before showing results.

  32. Dolby Voice

    Dolby Laboratories

    Low

    Dolby Voice 1.1 relays web page postMessages to a native messaging host with no origin or payload sanitization.

  33. DesignHub

    Firearc Technologies Ltd.

    Medium

    DesignHub sends typed omnibox search terms to suggesting.designhubapp.com over unencrypted HTTP.

  34. Default Search with Anthropic

    benmerry

    Medium

    The extension removes Claude's malicious-prompt caution banner on claude.ai pages.

  35. Download with Free Download Manager (FDM)

    Joe Ertaba

    Clean

    Download with Free Download Manager sends download URLs and referrers to its local native client.

  36. DA PA Checker

    Harpreet Kumar

    Clean

    DA PA Checker sends the active tab's domain with a persistent device token to its domain-check API.

  37. DNS Lookup

    whatsmydns

    Clean

    DNS Lookup sends the active tab hostname to whatsmydns.net for automatic DNS lookups.

  38. Daily Weather Forecast

    boticariocrm · News & Weather

    Low

    Daily Weather Forecast sends visited site domains to apicdn.co and uses its responses to redirect matching link clicks.

  39. DesktopHut Live Wallpapers Tab Pro

    shelloux

    Low

    DesktopHut Live Wallpapers Tab Pro sends bookmark domains to third-party favicon services on the new-tab page.

  40. DevTools for D365F&O

    Devanalytic365

    Clean

    DevTools for D365F&O lets Dynamics pages request a visible-tab screenshot and receive the cropped image.

  41. Dictionariez: Your Dictionary, Your Language

    River · Education

    Low

    Dictionariez lets visited pages send supplied text to pnl.dev through its translation bridge.

  42. Directors Desk SecureView

    Directors Desk - Secure View

    Low

    Directors Desk SecureView bridges document links on directorsdesk.com to a local native viewer, forwarding a hardcoded key seed bundled in the extension.

  43. Docs Offline

    Suijin

    Medium

    Docs Offline sends pasted text, page details, quiz content, and page images from all sites to ClipKey servers.

  44. Doodle Jump

    doodlejump

    Low

    Doodle Jump allows notifications from digitalgamedoo.com and opens that site when installed.

  45. Double Subtitles for Prime by MovieLingo

    movielingo.app · Education

    Clean

    Double Subtitles for Prime sends Prime Video and Amazon subtitle text to Google Translate for second-subtitle display.

  46. Dragon Ball Super: Broly Wallpaper

    ongmason

    Low

    Dragon Ball Super: Broly Wallpaper sends your most-visited site URLs to Google's favicon service on each new-tab page.

  47. Drift Email

    Clean

    Drift Email rewrites tracked Gmail links and sends recipient, subject, and Gmail message details to Drift.

  48. Dark Mode - Night Eye

    Night Eye

    Low

    Dark Mode - Night Eye lets any website trigger support messages sent with stored chat identity details.

  49. DanfeOnline - Gerador de DANFE

    DanfeOnline

    Clean

    DanfeOnline - Gerador de DANFE retrieves Fazenda invoice pages and XML through www.danfeonline.com.br.

  50. DjVu.js Viewer

    RussCoder

    Low

    DjVu.js Viewer lets any website trigger extension-privileged DjVu loading and render cross-origin documents into the page.

  51. Download Facebook Videos

    pbion.com

    Low

    Download Facebook Videos rewrites Facebook and fbcdn request headers for requests started outside Facebook.

  52. Dualsub - YouTube Subtitle Translator

    Dualsub Studio

    Clean

    Dualsub sends selected subtitle dialogue chunks and an optional API key to api.dualsub.xyz for translation.

  53. Dark Mode for YouTube™

    Free Software Utilities

    Low

    Dark Mode for YouTube™ exposes its extension ID and resource base URL to YouTube page scripts.

  54. DataDID

    memolabsio

    Clean

    DataDID reports aggregate active-tab domain and category counts while mining mode is enabled.

  55. Delete Facebook Messages

    Lynx · Social & Communication

    Low

    Delete Facebook Messages removes Facebook Content-Security-Policy headers on page and XHR responses.

  56. Demandbase for Sales

    Demandbase Inc

    Low

    Demandbase for Sales lets any HTTPS page ask the extension to open an attacker-chosen URL in a new tab.

  57. Depth Translator for DeepL

    Faisal Ahmed

    Clean

    Depth Translator for DeepL sends selected page text to DeepL translator URLs when you ask it to translate.

  58. Devyce Softphone Extension

    Devyce

    Clean

    Devyce Softphone Extension sends clicked phone numbers and CRM page context to softphone.devyce.io.

  59. Discord Token Login

    discordkit

    Clean

    Discord Token Login passes a Discord token through the page URL and writes it into Discord localStorage.

  60. Discord Translator Pro - Immersive Bilingual Chat Translation

    Ivan · Social & Communication

    Clean

    Discord Translator Pro sends Discord message and draft text to the selected translation provider.