Browser extensions starting with H

hsmftp.honeywell.com Download tool starts downloads from base64-encoded hwdm links opened on Honeywell's site.

html.tomake.design (llama) lets any website trigger a page DOM capture into a downloaded .h2fig file.

HotelXray deletes Kasada, Cloudflare, Akamai, F5, and PerimeterX bot-detection cookies on hyatt.com and reloads the page on a block.

HBO Max SubStyler enables viewing-data sharing by default and sends Max profile and watch data to its servers.

HTnini writes its extension runtime ID into the Hattrick page DOM when its in-page UI opens.

Hotukdeals runs on every website visited and reports the domain to a Browsy lookup service.

This Hulu.jp picture-in-picture extension also scrapes U-NEXT account and watch history and uploads it to a third-party server.

HTML editor WebStudio for Webpages sends the URL of every site you visit to a tracking server on each tab switch.

Hot.Game+ swaps in its own affiliate IDs on ~15 partner game stores, auto-enabled with no prompt on Opera, Yandex and Vivaldi.

Highlightion accepts your Notion login token from a local port with no origin check, and sends every page you visit to Google Analytics.

HBOMax Video Bender sends your HBO Max profile details and watch history to me3x.online and metricsmint.quest.

Horoscope loads its new tab page from a server-chosen URL and lets that page read your most visited sites.

HBO Max Episode Selector uploads your Max account profiles, watch history and subscriptions to me3x.online, on by default.

Hagro reads your full LinkedIn cookie jar, including the session-auth cookie, and exposes it to its own site.

HUNTER-SALE sends the domain of each https site you visit to hunter-sale.ru to look up coupons.

Handbrake - video converter sends the URL of every page you open, plus the previous URL, to runapps.org.

Hounds of Business Community sends the URL of each page you finish loading on video-meeting sites to mymosttrusted.net.

AVE VPN shows a 'VPN enabled' toggle but has no proxy or VPN code, and opens a Telegram bot link.

Huoloo ChatOS stores operator account passwords, base64-encoded only, in localStorage on the chat site.

Hide Yo Links stores your PIN and hidden links in plaintext in local browser storage.

Home Scope reads the current listing on realestate.com.au or domain.com.au and sends it to its own server for a location-based rating.

HEIAN Wallet stores the unlocked private key and mnemonic in plaintext extension storage and exposes the wallet address to any page.

Hotel Bedding Rating Extension builds a browser fingerprint and sends it with every rating you submit.

Hypelio reads your LinkedIn session cookies to fetch your posts and analytics and sends them to its Supabase backend.

HBS CONNECT sends WhatsApp Web voice messages to hc-stt.hiperchat.com.br when you click Transcribe.

HGTX Intelligence Starter adds WhatsApp Web tools and connects to Hiperchat servers with your WhatsApp ID on every load.

Hide Spoilers works with Paramount Plus collects your Paramount+ account, subscription, and viewing activity and sends it to its own server.

This app provides online and offline access to HMH lessons, assessments, classroom collaboration, and reporting.

HandChat copies WhatsApp Web messages, including deleted and view-once ones, and sends them to its own servers.

HaveHires sends Greenhouse candidate and job data from recruiter pages to its own backend at hhbe.havehires.com.

Headers Toolbox lets its popup read window properties from any web page you open.

Hugopaket adds a courier-dispatch button to restaurant partner panels and sends order details to hugopaket.app.