Browser extensions starting with M

549 browser extension security reviews, listed by name.

  1. MPCVault

    chrome-plugin-group-publisher

    Low

    MPCVault lets any webpage set the extension's stored login token through its injected login bridge.

  2. mybest%E4%BB%A3%E8%B4%AD%E4%BB%A3%E8%BF%90%E5%8A%A9%E6%89%8B-%E4%B8%80%E9%94%AE%E6%B7%BB%E5%8A%A0%E5%8C%85%E8%A3%B9

    mybest.com.my · Shopping

    Medium

    MYBEST代购代运助手 sends parcel form details to MYBEST over cleartext HTTP.

  3. MacBed Update Notifier

    Appked · Social & Communication

    Clean

    MacBed Update Notifier periodically requests MacBed's RSS feed from the background.

  4. Macro Recorder for Chrome™

    webservice2t

    Clean

    The extension records active-tab keystrokes, form inputs, clicks, mouse movement, and scrolls during macro recording.

  5. Macro Settings by FOODFASTFIT

    FOODFASTFIT

    Medium

    Macro Settings by FOODFASTFIT lets an HTTP site set macro goals that it later posts to MyFitnessPal.

  6. Mafuyu PJSK Live Wallpaper

    Horizon

    Low

    Mafuyu PJSK Live Wallpaper sends user-added shortcut URLs to Google's favicon service when rendering its new tab page.

  7. Magic Extension

    Medium

    Magic Extension sends active-tab URLs, page titles, and input-activity counts to the Magic web app.

  8. Magnetar

    ArrCee

    Low

    Magnetar sends detected torrent hashes to the configured debrid provider for cache checks.

  9. Mais e-Sports Descontos

    maisesportsdescontos

    Medium

    Mais e-Sports Descontos sends matched shopping-page URLs and extracted page values to descontos.maisesports.com.br.

  10. Making Today

    Making Today

    Low

    Making Today loads Google Fonts from its new-tab page, sending each new-tab request to fonts.googleapis.com.

  11. ManageJobApplications - Job Posting Import

    Manage Job Applications

    Clean

    ManageJobApplications imports job posting details from the active HTTPS tab and sends them to managejobapplications.com.

  12. Manchester City Wallpapers

    Gameograf · Functionality

    Low

    Manchester City Wallpapers fetches remote popup HTML and displays it on the extension's new tab page.

  13. Mandiant Advantage | Threat Intelligence

    mati-plugin

    Clean

    Mandiant Advantage scans page text for threat indicators and sends matched URLs, domains, IPs, hashes, and CVEs to Mandiant.

  14. MangaToon For PC Windows 10

    WebGamersOne

    Low

    MangaToon For PC Windows 10 sends top-site URLs to Google when showing favicons on its new-tab page.

  15. Manypage Scraper - Download Video

    PT BOOSTER TEKNOLOGI INDONESIA

    Clean

    Manypage Scraper captures Facebook or YouTube cookies during a popup flow and sends them to api.manypage.id.

  16. Map Route Pro

    Atom Applications

    Low

    Map Route Pro embeds an Azure Maps key and sends map search requests to atlas.microsoft.com.

  17. Maple Bookmarks

    Tw93

    Clean

    Maple Bookmarks reads your bookmark tree and displays bookmark titles and URLs in its popup.

  18. Maps links in Brave Search

    diego.aldarese

    Clean

    Maps links in Brave Search opens clicked map links with your Brave Search query in the selected maps provider.

  19. MarkMagic - Effortless Bookmark Manager

    lonnylovemusic

    Clean

    MarkMagic checks saved bookmark URLs by fetching them from the extension when the user opens its cleanup tools.

  20. MarketDB - Аналитика Магнит Маркета

    MarketDB

    Low

    MarketDB - Аналитика Магнит Маркета stores report UUIDs in mm.ru localStorage and sends them to MarketDB report APIs.

  21. Marketplace Listings Reposter

    SaltyNerdAppStudio

    Low

    Marketplace Listings Reposter can send masked Facebook page activity recordings to Sentry.

  22. Marvel Rivals Live Wallpaper

    chromelive · Art & Design

    Low

    Marvel Rivals Live Wallpaper sends user-added shortcut URLs to Google's favicon service.

  23. Maskara - AI Prompt Optimizer for ChatGPT, Claude, Loveable and more

    CodeSquire.ai

    Clean

    Maskara sends AI prompt text and optional chat IDs to its backend when users request prompt optimization.

  24. Mass Copy URLs − copy all URLs on all tabs

    Singularity Labs

    Clean

    Mass Copy URLs copies every open tab's URL, and optionally each title, to the clipboard when the popup is used.

  25. Mastermind Search Companion

    Genomenon Inc.

    Clean

    Mastermind Search Companion sends supported genetics search terms, page URLs, and result titles to Mastermind's servers.

  26. MathGPT

    cws.tools · Education

    Medium

    MathGPT uploads user-selected screenshot regions and sends the resulting image URL to its solving service.

  27. Mathway Screenshot Support

    SJS

    Clean

    Mathway Screenshot Support sends pasted images on Mathway pages to Mathway's OCR endpoint.

  28. Matrix Start Tabs

    bryce

    Low

    Matrix Start Tabs sends failed navigation hostnames to matrixstarttabs.com.

  29. Max Verstappen Red Bull F1 Champion Maserati Live Wallpaper

    Gameograf

    Low

    Max Verstappen Red Bull F1 Champion Maserati Live Wallpaper inserts Gameograf popup HTML into its new-tab page.

  30. MaxWorth: AI Credit Card Tool

    MaxWorth

    Clean

    MaxWorth syncs matched AmEx and Chase card-offer details to its Supabase backend.

  31. MayiFree-開水小助手

    CHT

    Low

    MayiFree-開水小助手 redirects a game script to remote code hosted on fish.mayifree.com.

  32. Mazepool- ads library tool for Meta™️

    mazepool

    Medium

    Mazepool exposes typed license keys to Facebook Ads Library page scripts and sends them to Gumroad for validation.

  33. Medium for All

    Himanshu Yadav

    Low

    Medium for All deletes cookies for Medium requests, including cookies from the page that initiated the request.

  34. Meet Soundboard

    wernermilton

    Clean

    Meet Soundboard encrypts exported soundboard backups with a shared hardcoded passphrase.

  35. MeetApps: Google Calendar Video Call Links

    MeetApps

    Clean

    MeetApps sends an MD5 hash of your Google Calendar email to its license validation server.

  36. Meeting Controls for stream deck

    kolaborateplatform

    Clean

    Meeting Controls for stream deck sends Google Meet control state to a local Stream Deck companion.

  37. Meeting Voice Captions Translate

    Danny · Communication

    Clean

    Meeting Voice Captions Translate sends Google Meet and Teams live captions to Google Translate by default.

  38. Mega Messenger

    andrew

    Medium

    Mega Messenger periodically reads Facebook friends' birthdays and sends the birthday list to next.cloudki.io.

  39. Melhora o Preço

    Melhora o Preço

    Clean

    Melhora o Preço sends product-page details from matched shopping sites to its price-history API.

  40. Meme Generator

    kitos122023 · Entertainment

    Clean

    Meme Generator uploads user-selected page screenshot regions to upload.meme-generator.fun for meme creation.

  41. MemoTab – New Tab Notes & Focus Mode

    Ab.dev

    Low

    MemoTab sends daily counts of notes, boards, shortcuts, iframes, checklists, and focus sessions to api.memotab.space.

  42. Mend Advise

    Mend

    Clean

    Mend Advise sends visited package-repository pages and detected package coordinates to Mend's browser plugin endpoint.

  43. Mesh

    Clay

    Low

    Mesh lets any site trigger its web-accessible iframe to identify the signed-in account to Segment.

  44. Messi Live Wallpaper

    Ovkas

    Low

    Messi Live Wallpaper sends new-tab shortcut domains to Google to load favicon images.

  45. Messi Wallpapers - HD Football New Tab Wallpaper

    WallExt

    Low

    Messi Wallpapers sends custom new-tab shortcut URLs to Google's favicon service.

  46. MetaDefender Endpoint Download Protection

    OPSWAT

    Clean

    MetaDefender Endpoint Download Protection sends completed download URLs to an OPSWAT native host.

  47. MetaPush

    metalistlab

    Low

    MetaPush sends session and error telemetry from scoped NFT site pages to sentry.fuxi.netease.com.

  48. Metadata Viewer

    Lars

    Clean

    Metadata Viewer sends the active tab URL and page meta tags to api.koelker.dev when its DevTools panel opens.

  49. MiFone MITEK

    MITEK

    Low

    MiFone MITEK sends call metadata and local WebRTC IP details to a hardcoded n8n-dev.mitek.vn webhook during poor call quality.

  50. MiaProva

    MiaProva

    Clean

    MiaProva captures Adobe Target and Web SDK request and response bodies for in-extension optimization debugging.

  51. Michael Jordan MeaVana

    MeaVana

    Low

    Michael Jordan MeaVana removes Content-Security-Policy and frame-protection headers through dynamic network rules.

  52. Microslop

    4O4

    Clean

    Microslop rewrites Microsoft-related words in visible page text on every website.

  53. Microsoft Audio-Content-Creation TTS Exporter

    mtd support

    Low

    Microsoft Audio-Content-Creation TTS Exporter enables Amplitude tracking on Microsoft audio content creation pages.

  54. Milleis Digital - Custom CSS

    olivier.raboisson

    Low

    Milleis Digital - Custom CSS injects remote background images into Milleis and BQE banking pages.

  55. MindTree: Mindmap for ChatGPT

    yunbiaoch

    Low

    MindTree exposes its extension ID in page-visible resource URLs on ChatGPT.

  56. Mine Finder

    Game Anything · Games

    Low

    Mine Finder sends popup usage events to Google Analytics with a persistent extension client ID.

  57. Minecraft Live Wallpapers New Tab

    Gameograf

    Low

    Minecraft Live Wallpapers New Tab loads Gameograf-controlled shortcuts and popup HTML on its new tab page.

  58. Minecraft Sakura Pond Live Wallpaper

    EpicArt

    Low

    Minecraft Sakura Pond Live Wallpaper sends shortcut URLs to Google when it loads favicons on the new-tab page.

  59. Minelead

    minelead.io

    Low

    Minelead reads active-tab page text to find email addresses and sends them to api.minelead.io for validation.

  60. Miro Search

    Ilya Novikov

    Clean

    Miro Search sends usage analytics with a persistent anonymous ID and hashed Miro user or board IDs to Segment.