Browser extensions starting with D

475 browser extension security reviews, listed by name.

  1. Dislikes in YouTube™

    hemu inc.

    Clean

    Dislikes in YouTube sends YouTube video IDs and visible like counts to Return YouTube Dislike when pages load.

  2. Темная тема для ВК | Dark theme for VK

    Light Alex

    Low

    Dark theme for VK fetches remote settings that can insert iframes into VK pages and pass conversation IDs in the iframe URL.

  3. Dark Mode for AliExpress & Alibaba

    Dropshipping Store

    Medium

    AliExpress & Alibaba Dark Mode forwards clicked shopping URLs to alitems.link affiliate redirects.

  4. D1CryptExt Native Messaging Host

    Dmitry Bogush

    Low

    D1CryptExt Native Messaging Host lets scoped local-domain pages send messages to its native host.

  5. D1NMH Native Messaging Host

    Dmitry Bogush

    Clean

    D1NMH Native Messaging Host lets approved Belarus rail and ISC sites call a local cryptography native host.

  6. DaData - аналитика маркетплейса Uzum Market

    DaData.io

    Clean

    DaData - аналитика маркетплейса Uzum Market sends Uzum product and category page details to api.dadata.io for analytics widgets.

  7. Daily Wallpaper Changer (Google & Wikipedia)

    ssappmkr · Art & Design

    Low

    Daily Wallpaper Changer injects GitHub-controlled CSS into matching HTTP/S pages based on each page URL.

  8. Dailymotion Dual Subtitles - Subtitle Translator

    revja0189

    Low

    Dailymotion Dual Subtitles mirrors subtitle translation messages to Amplitude with video URLs, titles, and subtitle text.

  9. Danmaku Anywhere

    Quin Fisher

    Clean

    Danmaku Anywhere sends default-on Microsoft Clarity telemetry from its popup and injected controller.

  10. Danni's Hattrick Helper

    Danni-san

    Low

    Danni's Hattrick Helper copies its OAuth token from extension storage into readable page cookies on Hattrick pages.

  11. Data Extractor

    Data Extractor

    Clean

    Data Extractor reads DOM text and link URLs from the active tab when its popup scraping tools run.

  12. Dawntech+ for Blip

    beuren.bechlin

    Clean

    Dawntech+ for Blip runs Blip configuration scripts with Desk account, contact, and ticket context.

  13. DePIN Chain

    tech

    Clean

    DePIN Chain routes browser traffic through KeenVPN proxy servers and includes static proxy login credentials in its service worker.

  14. DealCatcher

    DealCatcher · Shopping

    Low

    DealCatcher sends opened overlay page URLs and coupon-related search queries to its analytics and lookup endpoints.

  15. Decopy AI | YouTube Summary & Transcript Generator

    Decopy AI

    Medium

    Decopy AI sends YouTube video IDs and summary inputs to api.decopy.ai with a persistent device identifier.

  16. Deep Enrich - B2B Phone Number & Email Finder

    DeepEnrich

    Low

    Deep Enrich sends LinkedIn profile URLs to app.deepenrich.com before its consent dialog is accepted.

  17. DeepSeek Open SideBar in Chrome

    DeepSeek

    Low

    DeepSeek Open SideBar in Chrome removes anti-framing and content-security headers on DeepSeek and Google pages.

  18. Definio AI: Multi-Modal AI Sidebar

    Definio Ai

    Medium

    Definio AI can send selected page text, screenshots, and account identifiers to Definio and analytics endpoints.

  19. Delete Twitter Posts - Bulk Clean X Tweets

    Spark Tools

    Clean

    Delete Twitter Posts captures X/Twitter auth headers locally to run bulk tweet deletion requests.

  20. DeleteNonio

    dippas

    Low

    DeleteNonio deletes first-party cookies when a page URL contains a monitored news-domain substring.

  21. Demon Slayer Kimetsu no Yaiba Wallpaper

    ethanhuang

    Low

    Demon Slayer Kimetsu no Yaiba Wallpaper sends top-sites URLs to Google's favicon service on its new-tab page.

  22. Demon Slayer Mugen Train Wallpaper

    hoonmoi

    Low

    Demon Slayer Mugen Train Wallpaper sends Most Visited site URLs to Google's favicon service.

  23. Demon Slayer Tanjiro Wallpaper

    fiona.leong

    Low

    Demon Slayer Tanjiro Wallpaper sends top-sites URLs to Google's favicon service on each new tab.

  24. Den Danske Ordbog

    Daniel

    Clean

    Den Danske Ordbog sends dictionary search terms to Google Analytics with a persistent extension client ID.

  25. DesignSpec Web Clipper

    DesignSpec

    Clean

    DesignSpec Web Clipper sends login credentials with a bundled WebClipper client secret to its platform token endpoint.

  26. Desmos Dashboard Download

    Greg Epstein · Education

    Clean

    Desmos Dashboard Download turns visible Desmos dashboard student names and response statuses into a local CSV.

  27. Diffusion Studio Extension

    Diffusion Studio GmbH

    Clean

    Diffusion Studio Extension lets its pages open supplied URLs in a background tab and return extracted page text.

  28. Digitalpanel Downloader

    Digitalpanel

    Clean

    Digitalpanel Downloader sends Freepik generator prompts from request bodies to DigitalPanel telemetry.

  29. Dimensions

    Art & Design

    Low

    Dimensions requests a Font Awesome stylesheet from cdnjs.cloudflare.com when its popup opens.

  30. Discord Exporter - Backup discord chat logs

    EchoWebBot Studio

    Low

    Discord Exporter copies your Discord login token into a page-readable body attribute on discord.com.

  31. Discord Token Login

    Sefinek

    Low

    Discord Token Login writes a URL-supplied value into Discord localStorage as the session token.

  32. DivulgaLinks - Captura de Ofertas

    DivulgaLinks

    Critical

    DivulgaLinks extracts WhatsApp Web session credentials and sends them to pro.divulgalinks.com.br.

  33. DocEase: AI Text Formatter for Docs

    Yash Khurana

    Clean

    DocEase sends Gmail draft text to its API when the user clicks its Format with DocEase button.

  34. Documate OCR

    inswanmarket

    Low

    Documate OCR lets any installed extension open it and pass image blobs into its OCR interface.

  35. Document signing component for NKČR

    NKČR

    Clean

    Document signing component for NKCR lets allowed NKCR and localhost pages read selected cookies for local PKI signing.

  36. Domain Age Checker by Semantic Pen

    David Malla

    Clean

    Domain Age Checker by Semantic Pen sends the current tab's hostname to a domain-age API when opened.

  37. Domo - domain name info: WHOIS, RDAP, DNS & history lookup

    Layered

    Clean

    Domo reads the active tab's domain and sends it to domain lookup and DNS resolver services.

  38. Dork Filtertron

    josephnhyatt

    Low

    Dork Filtertron loads popup CSS and button mask assets from Cloudflare cdnjs and GitHub raw content when its popup opens.

  39. Double Click Image Downloader

    ifad.ardin

    Low

    Double Click Image Downloader starts image downloads from pages when matching image click events occur.

  40. Double Click Translate - Instant Translation, Dictionary & PDF Support

    Franky Giap

    Clean

    Double Click Translate sends selected page text to Google Translate and translator.dbclick.cx for translation.

  41. DraStic DS Emulator Apk PC [Guide]

    bishnusahu184

    Low

    DraStic DS Emulator Apk PC [Guide] fetches remote settings that can open first-run tabs and set popup content.

  42. Drag & Input

    akippiko

    Clean

    Drag & Input sends selected form context and nearby page HTML to its AI provider when users generate answers.

  43. DragIt!

    k3vmcd

    Low

    DragIt! lets page scripts trigger its drag-and-drop handler to open an attacker-chosen URL in a new tab.

  44. Dragon Ball Super Wallpaper

    jane.coco

    Low

    Dragon Ball Super Wallpaper sends your most visited site URLs to Google's favicon service on the new tab page.

  45. Dragon Ball Z Live Wallpaper

    Gameograf · Art & Design

    Low

    Dragon Ball Z Live Wallpaper inserts Gameograf popup HTML into its new-tab page.

  46. Dragon Ball Z Wallpaper

    kenchua

    Low

    Dragon Ball Z Wallpaper sends your most-visited site URLs to Google's favicon service on the new tab page.

  47. Draw on Screen

    ValmisLab

    Low

    Draw on Screen lets page scripts request a privileged screenshot download after its drawing mode is enabled.

  48. Drop a GIF

    AltIvan

    Low

    Drop a GIF modifies WhatsApp Web's content security policy so it can inject its GIF-sharing scripts.

  49. DuoNinja - Dual captions for YouTube videos

    Mink · Education

    Clean

    DuoNinja sends imported Duolingo vocabulary rows to its own API when you choose to import them.

  50. Duration for Google Tasks

    Xander Jennie

    Low

    Duration for Google Tasks sends pageview and autocapture telemetry from Google Calendar and Tasks pages to PostHog.

  51. d%C3%B6viz-ve-alt%C4%B1n-kurlar%C4%B1

    Mozturkgss · News & Weather

    Low

    Döviz ve Altın Kurları posts built-in Altinkaynak SOAP credentials to an HTTP data service when its popup loads.

  52. dScribe Data: Increase understanding & adoption of your BI reports

    dscribedata

    Low

    dScribe Data contacts dScribe APIs from HTTPS pages outside dScribe when you are signed in.

  53. DotGit

    davtur

    Clean

    DotGit checks visited sites for exposed repository and sensitive-file paths and stores matching findings locally.

  54. discord-token-login_ff

    gate

    Medium

    Discord Token Login injects popup-entered token text into Discord pages through unsafely constructed script code.

  55. Download Dailymotion videos

    pbion.com

    Low

    Download Dailymotion videos sends persistent install and runtime metadata to pbion.com telemetry.

  56. dataslayer

    Sean Adams

    Low

    dataslayer lets any website turn off its analytics-request blocking rule through a page message.

  57. Deck transfer for Yu-Gi-Oh! Master Duel and Neuron

    Kevin Lu

    Clean

    Deck transfer for Yu-Gi-Oh! Master Duel and Neuron sends deck card identifiers to YGOPRODECK when importing or exporting decks.

  58. Google Dark Theme

    Elijah Lopez

    Low

    Google Dark Theme loads a Flaticon image from Google pages where its injected dark-theme CSS matches.

  59. DevTools Media Panel

    Karolien Koorts

    Clean

    DevTools Media Panel records WebRTC and getUserMedia metadata from HTTPS pages for its devtools panel.

  60. DraftSharks Sync

    DraftSharks

    Clean

    DraftSharks Sync embeds a Yahoo OAuth client credential and uses it when exchanging Yahoo authorization tokens.