Browser extensions starting with D
475 browser extension security reviews, listed by name.

Dislikes in YouTube™
hemu inc.
CleanDislikes in YouTube sends YouTube video IDs and visible like counts to Return YouTube Dislike when pages load.

Темная тема для ВК | Dark theme for VK
Light Alex
LowDark theme for VK fetches remote settings that can insert iframes into VK pages and pass conversation IDs in the iframe URL.
Dark Mode for AliExpress & Alibaba
Dropshipping Store
MediumAliExpress & Alibaba Dark Mode forwards clicked shopping URLs to alitems.link affiliate redirects.
D1CryptExt Native Messaging Host
Dmitry Bogush
LowD1CryptExt Native Messaging Host lets scoped local-domain pages send messages to its native host.
D1NMH Native Messaging Host
Dmitry Bogush
CleanD1NMH Native Messaging Host lets approved Belarus rail and ISC sites call a local cryptography native host.
DaData - аналитика маркетплейса Uzum Market
DaData.io
CleanDaData - аналитика маркетплейса Uzum Market sends Uzum product and category page details to api.dadata.io for analytics widgets.
Daily Wallpaper Changer (Google & Wikipedia)
ssappmkr · Art & Design
LowDaily Wallpaper Changer injects GitHub-controlled CSS into matching HTTP/S pages based on each page URL.
Dailymotion Dual Subtitles - Subtitle Translator
revja0189
LowDailymotion Dual Subtitles mirrors subtitle translation messages to Amplitude with video URLs, titles, and subtitle text.
Danmaku Anywhere
Quin Fisher
CleanDanmaku Anywhere sends default-on Microsoft Clarity telemetry from its popup and injected controller.
Danni's Hattrick Helper
Danni-san
LowDanni's Hattrick Helper copies its OAuth token from extension storage into readable page cookies on Hattrick pages.
Data Extractor
Data Extractor
CleanData Extractor reads DOM text and link URLs from the active tab when its popup scraping tools run.
Dawntech+ for Blip
beuren.bechlin
CleanDawntech+ for Blip runs Blip configuration scripts with Desk account, contact, and ticket context.
DePIN Chain
tech
CleanDePIN Chain routes browser traffic through KeenVPN proxy servers and includes static proxy login credentials in its service worker.
DealCatcher
DealCatcher · Shopping
LowDealCatcher sends opened overlay page URLs and coupon-related search queries to its analytics and lookup endpoints.
Decopy AI | YouTube Summary & Transcript Generator
Decopy AI
MediumDecopy AI sends YouTube video IDs and summary inputs to api.decopy.ai with a persistent device identifier.
Deep Enrich - B2B Phone Number & Email Finder
DeepEnrich
LowDeep Enrich sends LinkedIn profile URLs to app.deepenrich.com before its consent dialog is accepted.
DeepSeek Open SideBar in Chrome
DeepSeek
LowDeepSeek Open SideBar in Chrome removes anti-framing and content-security headers on DeepSeek and Google pages.
Definio AI: Multi-Modal AI Sidebar
Definio Ai
MediumDefinio AI can send selected page text, screenshots, and account identifiers to Definio and analytics endpoints.
Delete Twitter Posts - Bulk Clean X Tweets
Spark Tools
CleanDelete Twitter Posts captures X/Twitter auth headers locally to run bulk tweet deletion requests.
DeleteNonio
dippas
LowDeleteNonio deletes first-party cookies when a page URL contains a monitored news-domain substring.
Demon Slayer Kimetsu no Yaiba Wallpaper
ethanhuang
LowDemon Slayer Kimetsu no Yaiba Wallpaper sends top-sites URLs to Google's favicon service on its new-tab page.
Demon Slayer Mugen Train Wallpaper
hoonmoi
LowDemon Slayer Mugen Train Wallpaper sends Most Visited site URLs to Google's favicon service.
Demon Slayer Tanjiro Wallpaper
fiona.leong
LowDemon Slayer Tanjiro Wallpaper sends top-sites URLs to Google's favicon service on each new tab.
Den Danske Ordbog
Daniel
CleanDen Danske Ordbog sends dictionary search terms to Google Analytics with a persistent extension client ID.
DesignSpec Web Clipper
DesignSpec
CleanDesignSpec Web Clipper sends login credentials with a bundled WebClipper client secret to its platform token endpoint.
Desmos Dashboard Download
Greg Epstein · Education
CleanDesmos Dashboard Download turns visible Desmos dashboard student names and response statuses into a local CSV.
Diffusion Studio Extension
Diffusion Studio GmbH
CleanDiffusion Studio Extension lets its pages open supplied URLs in a background tab and return extracted page text.
Digitalpanel Downloader
Digitalpanel
CleanDigitalpanel Downloader sends Freepik generator prompts from request bodies to DigitalPanel telemetry.
Dimensions
Art & Design
LowDimensions requests a Font Awesome stylesheet from cdnjs.cloudflare.com when its popup opens.
Discord Exporter - Backup discord chat logs
EchoWebBot Studio
LowDiscord Exporter copies your Discord login token into a page-readable body attribute on discord.com.
Discord Token Login
Sefinek
LowDiscord Token Login writes a URL-supplied value into Discord localStorage as the session token.
DivulgaLinks - Captura de Ofertas
DivulgaLinks
CriticalDivulgaLinks extracts WhatsApp Web session credentials and sends them to pro.divulgalinks.com.br.
DocEase: AI Text Formatter for Docs
Yash Khurana
CleanDocEase sends Gmail draft text to its API when the user clicks its Format with DocEase button.
Documate OCR
inswanmarket
LowDocumate OCR lets any installed extension open it and pass image blobs into its OCR interface.
Document signing component for NKČR
NKČR
CleanDocument signing component for NKCR lets allowed NKCR and localhost pages read selected cookies for local PKI signing.
Domain Age Checker by Semantic Pen
David Malla
CleanDomain Age Checker by Semantic Pen sends the current tab's hostname to a domain-age API when opened.
Domo - domain name info: WHOIS, RDAP, DNS & history lookup
Layered
CleanDomo reads the active tab's domain and sends it to domain lookup and DNS resolver services.
Dork Filtertron
josephnhyatt
LowDork Filtertron loads popup CSS and button mask assets from Cloudflare cdnjs and GitHub raw content when its popup opens.
Double Click Image Downloader
ifad.ardin
LowDouble Click Image Downloader starts image downloads from pages when matching image click events occur.
Double Click Translate - Instant Translation, Dictionary & PDF Support
Franky Giap
CleanDouble Click Translate sends selected page text to Google Translate and translator.dbclick.cx for translation.
DraStic DS Emulator Apk PC [Guide]
bishnusahu184
LowDraStic DS Emulator Apk PC [Guide] fetches remote settings that can open first-run tabs and set popup content.
Drag & Input
akippiko
CleanDrag & Input sends selected form context and nearby page HTML to its AI provider when users generate answers.
DragIt!
k3vmcd
LowDragIt! lets page scripts trigger its drag-and-drop handler to open an attacker-chosen URL in a new tab.
Dragon Ball Super Wallpaper
jane.coco
LowDragon Ball Super Wallpaper sends your most visited site URLs to Google's favicon service on the new tab page.
Dragon Ball Z Live Wallpaper
Gameograf · Art & Design
LowDragon Ball Z Live Wallpaper inserts Gameograf popup HTML into its new-tab page.
Dragon Ball Z Wallpaper
kenchua
LowDragon Ball Z Wallpaper sends your most-visited site URLs to Google's favicon service on the new tab page.
Draw on Screen
ValmisLab
LowDraw on Screen lets page scripts request a privileged screenshot download after its drawing mode is enabled.
Drop a GIF
AltIvan
LowDrop a GIF modifies WhatsApp Web's content security policy so it can inject its GIF-sharing scripts.
DuoNinja - Dual captions for YouTube videos
Mink · Education
CleanDuoNinja sends imported Duolingo vocabulary rows to its own API when you choose to import them.
Duration for Google Tasks
Xander Jennie
LowDuration for Google Tasks sends pageview and autocapture telemetry from Google Calendar and Tasks pages to PostHog.
d%C3%B6viz-ve-alt%C4%B1n-kurlar%C4%B1
Mozturkgss · News & Weather
LowDöviz ve Altın Kurları posts built-in Altinkaynak SOAP credentials to an HTTP data service when its popup loads.
dScribe Data: Increase understanding & adoption of your BI reports
dscribedata
LowdScribe Data contacts dScribe APIs from HTTPS pages outside dScribe when you are signed in.

DotGit
davtur
CleanDotGit checks visited sites for exposed repository and sensitive-file paths and stores matching findings locally.

discord-token-login_ff
gate
MediumDiscord Token Login injects popup-entered token text into Discord pages through unsafely constructed script code.

Download Dailymotion videos
pbion.com
LowDownload Dailymotion videos sends persistent install and runtime metadata to pbion.com telemetry.

dataslayer
Sean Adams
Lowdataslayer lets any website turn off its analytics-request blocking rule through a page message.

Deck transfer for Yu-Gi-Oh! Master Duel and Neuron
Kevin Lu
CleanDeck transfer for Yu-Gi-Oh! Master Duel and Neuron sends deck card identifiers to YGOPRODECK when importing or exporting decks.

Google Dark Theme
Elijah Lopez
LowGoogle Dark Theme loads a Flaticon image from Google pages where its injected dark-theme CSS matches.

DevTools Media Panel
Karolien Koorts
CleanDevTools Media Panel records WebRTC and getUserMedia metadata from HTTPS pages for its devtools panel.

DraftSharks Sync
DraftSharks
CleanDraftSharks Sync embeds a Yahoo OAuth client credential and uses it when exchanging Yahoo authorization tokens.