News & Weather extensions

Security reviews of 53 News & Weather browser extensions, each rated on what its code does when it runs.

  1. RSS Subscription Extension (by Google)

    rss-subscription-extension-owners@google.com

    Clean

    Detects RSS feeds on pages and lets you preview or subscribe to them from the Omnibox.

  2. TickerIQ Crypto Price Ticker

    Extpose

    Low

    TickerIQ Crypto Price Ticker sends periodic heartbeat events to Google Analytics with a persistent per-user identifier.

  3. Karma Nature

    7thsense.media

    Medium
  4. Bitcoin Price Tracker

    Extpose

    Clean

    This extension shows the current BTC/USD price in the browser toolbar.

  5. World Weather Forecast

    Smart Software

    Clean

    This extension shows current weather and forecasts for locations worldwide.

  6. Get RSS Feed URL

    shevabam

    Clean

    Finds and copies RSS or Atom feed URLs from websites you visit.

  7. Ground News

    Ground News

    Medium

    Shows how other news outlets cover the article you are reading.

  8. The Washington Post

    The Washington Post

    Clean

    Shows today’s top Washington Post stories when you open a new tab.

  9. Designer Daily Report

    Panda Network

    Medium

    Designer Daily Report exposes a postMessage handler that any webpage can use to open arbitrary tabs without origin validation.

  10. NewsGuard

    NewsGuard Technologies, Inc.

    Low

    NewsGuard sends each visited hostname and hovered link URL to its servers, tied to a persistent per-installation identifier.

  11. Paywall-Free Reader

    Muaad Abdirahman

    Clean

    Paywall-Free Reader opens reader requests on page.ke with the current page URL, title, and persistent device ID.

  12. Product Hunt

    Product Hunt Tab

    Clean

    Product Hunt lets its web page read your Chrome top-sites list from Product Hunt origin localStorage.

  13. Feedly Notifier

    Feedly Notifier developers

    Clean

    Feedly Notifier sends each feed item's source site URL to i.olsh.me when rendering favicons in the popup.

  14. Subscribe RSS Feeds in Feedly

    BrowserNative

    Clean

    Subscribe RSS Feeds in Feedly sends selected feed URLs to feedly.com when you choose to subscribe.

  15. Smarter RSS

    holden321

    Low

    The RSS Aggregator lets any website trigger extension-privileged requests to caller-supplied URLs.

  16. Current Moon Phase

    https://moonorganizer.com/

    Clean

    Current Moon Phase uses IPinfo location data to request local moon-phase details from Moon Organizer.

  17. Good Morning by cloudHQ

    cloudHQ

    Low

    Good Morning - New Tab by cloudHQ sends your Gmail address and account-switcher email list to cloudHQ on Gmail.

  18. Weather Tab

    Visicom Media

    Medium

    New Tab Weather sends new-tab search terms and campaign identifiers to vmnapi.net.

  19. News Lovers Tab

    Diversify Media, Inc.

    Medium
  20. GoodLinks

    goodlinks.app

    Clean

    Save to GoodLinks sends saved page URLs, titles, metadata, and selected text to Apple CloudKit.

  21. Daily Weather Forecast

    boticariocrm

    Low

    Daily Weather Forecast sends visited site domains to apicdn.co and uses its responses to redirect matching link clicks.

  22. World Weather

    office@marketinyo.com

    Medium

    World Weather redirects new-tab search queries to search.world-weather-extension.com with a fixed tracking ID.

  23. Gismeteo Tab

    Gismeteo

    Clean

    Gismeteo Tab sends IP-based city lookups and saved city IDs to Gismeteo weather endpoints.

  24. Global Weather Snap

    Clean

    Global Weather Snap uses IP geolocation and Mapbox reverse geocoding to set an initial weather location.

  25. Weather Forecast

    Fast Simple Apps

    Low

    Weather Forecast includes a shared OpenWeatherMap API key and sends weather requests to OpenWeatherMap.

  26. %D1%82%D0%B5%D0%BB%D0%B5%D0%BA%D0%B0%D0%BD%D0%B0%D0%BB-%D0%B4%D0%BE%D0%B6%D0%B4%D1%8C

    TV Rain

    Low

    Телеканал Дождь sends extension page routes and video or article titles to a remote analytics iframe.

  27. CaptainFact

    CaptainFact

    Clean

    CaptainFact sends matching YouTube video URLs to graphql.captainfact.io to load fact-checking statements.

  28. RSS Subscription Extension, Reader

    Smart Software

    Medium

    RSS Subscription Extension, Reader sends selected RSS feed URLs and reader options to rssmerge.flowsoft7.com over HTTP.

  29. Weather

    hocgin

    Low

    Weather may send your IP address to ip-api.com over cleartext HTTP when automatic location fallbacks run.

  30. Weather

    Denys Skychko

    Clean

    Weather sends saved city coordinates to i1.skyweather.org for periodic weather updates.

  31. WorldWeatherOnline

    World Weather Online

    Low

    WorldWeatherOnline embeds third-party weather and IP-location API credentials in its shipped JavaScript.

  32. d%C3%B6viz-ve-alt%C4%B1n-kurlar%C4%B1

    Mozturkgss

    Low

    Döviz ve Altın Kurları posts built-in Altinkaynak SOAP credentials to an HTTP data service when its popup loads.

  33. JoyTab - Your News Tab

    Audien

    Low

    JoyTab - Your News Tab sends Chrome top-sites URLs to api.statvoo.com for favicon lookups.

  34. MineWeather

    SAWDOG

    Clean

    MineWeather sends cached location coordinates to Open-Meteo for weather forecasts.

  35. Nomad Global

    dev.chrome

    Low

    Nomad Global sends dollar-related Google search terms to Google Analytics with a persistent client identifier.

  36. Get Weather Now

    Calc Team

    Low

    Get Weather Now sends automatic geolocation requests to ipinfo.io using a bundled API token.

  37. HealthGuard

    NewsGuard Technologies, Inc.

    Low

    HealthGuard embeds NewsGuard API credentials and uses them to request anonymous tokens and content-label services.

  38. Holiday Calendar

    gaoming13

    Low

    Holiday Calendar fetches regional calendar data over plaintext HTTP from calendar-crx.diary8.com.

  39. MANISH

    nire0510

    Low

    MANISH loads Google Material Icons over plaintext HTTP when its extension UI pages open.

  40. My Weather

    Mediastinct

    Low

    My Weather sends your IP-based location to weather services when opening its new-tab page.

  41. PremierLeague Stats

    softweart

    Medium

    PremierLeague Stats sends new-tab search terms to prls.premierleaguestats-ext.com with a tracking ID.

  42. Scenery Tab

    ScenK

    Low

    Scenery Tab sends your precise location coordinates to OpenWeatherMap for local weather on the new tab page.

  43. Weather & Time (multi-city)

    AlexKataev

    Low

    Weather & Time (multi-city) sends city searches to HERE and saved city coordinates to OpenWeather for forecasts.

  44. CNN News

    jjoshmurray

    Low

    CNN U.S. inserts news feed content from notifiernews.com into its popup using unescaped HTML.

  45. The New York Times News

    lukasburnord

    Low

    The New York Times News sources every headline, image, and click-through link from a third-party server, notifiernews.com, not NYT.

  46. Notifier for BBC News

    killianbyrnne

    Low

    Notifier for BBC News renders its remote feed into the popup with unescaped HTML, exposing it to markup injection and forced navigation.

  47. BBC Sport

    killianbyrnne

    Low

    BBC Sport renders remote feed content in its popup via unescaped HTML and reports a persistent device ID to its feed server.

  48. Fish Radar: US Fishing Forecast

    Msmaxim

    Low

    Fish Radar sends your location to fishing-report.ru and inserts the server's response into the popup without sanitizing it.

  49. NewsLens

    vrenduchintala17

    Clean

    NewsLens sends the hostname of every site you visit to its own server each time you open the popup.

  50. beautiful roses

    Low

    Beautiful Roses replaces the New Tab page with a NYTimes Technology RSS feed rendered via unescaped innerHTML.

  51. Deer

    Low

    Deer's new-tab page routes its Amazon shortcut icon through the vendor's own domain instead of amazon.com.

  52. Similar Feed

    Low

    Similar Feed automatically reads up to 500 recent history items and all bookmarks each day and sends up to 30 of them to a backend.

  53. WealthPipe

    ryanwfiorini

    Medium

    WealthPipe sends the full URL of every site you visit or switch to to its own server, with no opt-in.