Browser extensions starting with M

MP3 Downloader scans every webpage for audio file links and lets users download them directly from the popup.

MapQuest Directions transmits each search query in real time to its servers and injects server-controlled HTML into every new tab page.

Measuremate sends license keys and email addresses over unencrypted HTTP to a bare IP address.

MergeMail reads Gmail compose content — body, subject, and all recipients — and sends it to mergemail.co before each email is sent.

Miden Wallet injects a wallet API into HTTPS pages and syncs state with the Miden testnet every 30 seconds.

Monosnap sends a periodic telemetry ping to its analytics server that includes the user's configured Amazon S3 base URL.

Multimedia Search overrides the default search engine to browsingsafety.net and sends all address-bar queries with an affiliate tracking ID.

My Focal Find sets itself as the default search engine and tags every search you type with a persistent per-install ID.

Myibidder Auction Bid Sniper for eBay sends the current eBay page URL to Myibidder when you click its added controls.

Search automatic rewards opens hidden background tabs that run automated Bing searches to farm Microsoft Rewards points daily.

Mailvelope includes a hardcoded Google OAuth2 client_secret in its extension bundle, exposing the credential to anyone who unpacks the file.

Majestic Mountain Views sends every new-tab search query to landscape-extensions.com instead of your default search engine.

Economic Calendar, Market & News sends popup page-view analytics events to Google Analytics.

MONKNOW New Tab looks up your public IP address to infer your weather location.

Magic Copy sends the image you select from a page to Meta's Segment Anything prediction service.

Magnifying Glass for Google Chrome places a screenshot of the current tab into the page DOM after you click it.

Magoosh Vocabulary sends pronunciation lookup words and its embedded Wordnik API key to api.wordnik.com over HTTP.

Majestic Mountain Views sets an unbranded third-party site as your browser's default search engine and routes every search through it.

Mass Downloader for Instagram saves selected Instagram media and profile backups into organized ZIP downloads.

Matador.ai Extension lets Activix pages open Matador conversations with contact details supplied by the page.

Maven Tools for Salesforce reads Salesforce session cookies to call Salesforce APIs for its developer tools.

Mavryk Wallet replaces ads on all HTTPS pages with its own ads, using rules fetched from its servers.

Mayday lets any webpage with a spoofed trusted origin trigger ticket data to its recommendation API.

MeowLoad lets any web page ask it to open a supplied URL in a new browser tab.

Merkatys reads Wildberries search queries, product IDs, and auth tokens, and transmits them to its own servers.

Messenger Central sends new-tab search queries to srchms.com with a fixed affiliate identifier.

Minea sends token data to data.minea.com with an embedded shared Basic Auth credential.

Mitel Connect exposes account and call state to allowed GapiAuth pages and lets them trigger calls.

Mobile View injects a responsive-design overlay into web pages and stores device-selection preferences locally via chrome.storage.sync.

Imports AliExpress products into Modalyst for dropshipping store management.

Modern for Wikipedia stores a local history of visited Wikipedia articles in browser storage.

Mouse Pinch-To-Zoom exposes its extension ID to pages while handling zoom behavior.

Multiversity LockDown Browser transmits student name, username, and exam identifiers to a proctoring server and disables all other extensions during exam sessions.

The extension sends X/Twitter page URLs, account email, settings, and persistent IDs to xcontentbackuptool endpoints.

m1pro sends Monopoly One page titles and URLs with a persistent client ID to Google Analytics.

Media Converter and Muxer downloads FFmpeg from GitHub without verifying file integrity before installing it to the user's home directory.

MAL-Sync embeds hardcoded OAuth client secrets for three third-party services in its extension bundle.

YouTube mp3 Downloader sends the current YouTube video URL to videomp3convert.com when the download button is clicked.

Mailtag records sent Gmail message metadata and plaintext email body to app.mailtag.io after sending.

M3U8 Downloader fetches and merges HLS video segments from user-supplied URLs and saves them locally as .ts or .mp4 files.

M3U8 Downloaders sends selected media URLs, page titles, and referring tab URLs to m3u8downloaders.com.

MCP SuperAssistant sends page URLs, titles, environment details, and a persistent client ID to Google Analytics.

MEMO Cashback Bestshopping fetches Bestshopping's cashback catalog while checking visited sites for merchant matches.

MSN Homepage, Bing Search & News sends a Bing MUID cookie and persistent machine ID to g.ceipmsn.com during telemetry pings.

MYO Studio sends icon search requests with an embedded Yotoicons API key.

Maestro Label Designer Font Finder sends your installed font names to OnlineLabels pages that request them.

Mail Merge for Gmail sends recipient lists and email body content to lite.anothermailmerge.com for delivery.

MailKing sends Gmail account and message-thread context to cloudHQ campaign endpoints.

MailMaestro reports the active Gmail account email address to app.maestrolabs.com when Gmail loads.

Mailinblack lets any website set its trusted service URL before the first legitimate connection.

Manga Reader and Tracker - MangaPin sends matched manga page metadata to my.mangapin.com.

MarkDownload reads the active tab DOM and selection when you clip a page for local Markdown export.

Mass Friends Remover for Facebook | mobile posts the Facebook friends-page DOM to its server when page parsing fails.

Math Solver for Chrome uploads user-selected screenshot regions to Mathway Solver for OCR and problem solving.

McAfee SafeKey fetches server-controlled JavaScript from its vendor and executes it in every page's DOM.

McGill Enhanced lets users submit parsed transcript course and grade rows to a Google Forms endpoint.

Meditation Search loads a remote S3 page each time you open its new-tab page.

Medium Parser opens Medium article URLs through third-party reader and cache services.