Browser extensions starting with T

Traffic Ad Bar Surf Bar removes frame protections and rewrites subframe request headers in its Traffic Ad Bar tabs.

Transfer Dropbox to Google Drive uses a hardcoded AES-128-ECB key to decrypt all API responses from its backend, exposing user data to any party with access to the extension source.

Translator Extension sends selected page text to Google Translate when translation is invoked.

Translator for WhatsApp™ Web includes a fallback SiliconFlow API key and sends it as request credentials.

Triton Tab sends IP-derived latitude and longitude to its weather API over cleartext HTTP.

Control Spotify desktop playback from a browser extension without switching windows.

Video Downloader's content script has an unguarded message handler that sends the current URL and accepts DOM injection from any origin.

Terms of Service; Didn't Read displays crowd-sourced ToS ratings for the current site by fetching a service database from api.tosdr.org.

Shows the current hour in the Chrome toolbar for quick time checks.

THunt Image Downloader collects Temu product and store page data and sends it to temuhunt.com.

TTCommentExporter fetches TikTok video comments and stores them locally for CSV or XLSX export.

TTS Reader sends page text for speech playback and widget analytics with page URLs to external services.

Tab Colorizer Free loads replacement favicons from placehold.co on pages where you trigger tab colorization.

Tab Manager for Chrome exposes current-window tab titles to pages when its overlay is opened.

TabPilot sends open tab URLs and titles to its backend when users request AI tab suggestions.

Table Detection & Extraction sends selected table contents from visited pages to TableConvert for conversion.

Table OCR uploads selected page screenshots to Aliyun-backed Imgkits storage for OCR.

Table Tennis sends popup page views and a persistent client ID to Google Analytics.

Tag Tab Club sends new-tab search terms to tagtabclub.com with a persistent session identifier.

Tali AI removes browser security policy headers from main-frame pages on several EHR domains.

Tampermonkey Editors lets vscode.dev read and edit Tampermonkey userscript files.

Tapit reports handled errors on Faceit and Steam pages to Sentry with the current page URL and browser user agent.

TecWorld Descontos sends checkout-page URLs and selected page values to descontos.tecworld.com.br.

Telegram Blur - Advanced Telegram Web Privacy contacts ads.brainosia.com from an all-sites content script.

Telegram Video Downloader sends install/update telemetry, public IP, and the active Telegram tab URL to an Aliyun logstore.

Temp Mail - Disposable Temporary Email adds the active tab hostname to its uninstall analytics URL.

Templates for Google Docs by cloudHQ sends Google account emails from Docs and Drive to cloudHQ during pre-user checks.

Temporary Contacts sends new-tab search terms to api.tempcontacts.com before running the search.

TestGen Plug-In proxies credentialed browser requests to arbitrary URLs—including internal network hosts—through a native host application.

This extension extracts text from webpages and online sources for copying.

Text Request includes a Google OAuth client secret in its public extension JavaScript.

Text to Speech (Dubbing) - SpeakText sends entered text and imported subtitles to Microsoft Edge Read Aloud for audio.

Thales Smart Card Bridge relays smart card commands from any website to a native host via an unguarded CustomEvent channel.

The Easy Translator places selected page text into a Google Translate URL opened in a popup window.

The Jukebox sends a popup-open ping to a Supabase endpoint.

The QR Extension sends the active tab URL to dynamic QR shortening endpoints when the popup opens.

Quick QR Code accepts QR-history entries from any page script with no origin check and can jump to attacker-set URLs.

The Weather Tab sends your latitude and longitude to OpenWeatherMap for its new-tab weather widget.

Themefy sends each bookmarked URL to Google's favicon service when opening its new tab page.

Thống kê Sốp Pi bởi J2TEAM removes Shopee frame-protection headers for Shopee subframes.

Time Tracker by Tempo submits a hardcoded Atlassian OAuth client secret during token exchange flows.

Tipli sends text scraped from matched shopping pages, along with the full page URL, to www.tipli.ro.

Toca Life: World sends your Chrome top-sites URLs to Google's favicon service when its new-tab page loads.

Toolsy.io records sampled Sentry session replays on Etsy pages and sends replay data to Sentry.

Top Green Search appends a persistent session ID to searches sent to topgreenview.com.

Topaz SigIDExtLite relays page-supplied commands to a local fingerprint driver on any website without origin validation.

Torrent Search Engine For Chrome Professional sends Chromeapps search/navigation URLs and referrers to analytics.chromeapps.site.

Total AV Password Vault Assistant reads form credentials on all websites and forwards them to the local TotalAV app via native messaging.

Total Privacy For WhatsApp Web requests ads.brainosia.com from every page a user opens.

Trackerbot sends full e-commerce page HTML to its odd-jobs server when server-supplied debug flags request templates.

Tradingview assistant reads TradingView strategy and backtest data for user-initiated local optimization.

Transcript YouTube reports React panel exceptions on YouTube pages to a Sentry project.

Transfer OneDrive to Google drive reads your MultCloud user cookie to authenticate task requests to app.multcloud.com.

Translate sends user-selected page text to Google Translate when its context-menu translation action runs.

Translate sends user-selected text from any website to Google Translate when the translate icon is clicked.

Translate Online for Google Chrome opens Google Translate with text you select or type after you choose to translate it.

Translator fetches remote feature settings that can add configured elements to matching webpages.

Translator sends selected text and a stored generated email identifier to MyMemory for translation.