High risk browser extensions

Adblock for Browser sends each completed tab URL with a persistent user ID to abforbrowser.com.

FedEx Tracking redirects all omnibox searches to trackingnumbers.org and sets a persistent UUID tracking cookie that is restored if deleted.

My Focal Find sets itself as the default search engine and tags every search you type with a persistent per-install ID.

Pi Lens reports authenticated YouTube playback progress to pi-lens-api.penpencil.co on play, seek, and page leave.

Pinukim replaces the default search engine and homepage with searchsafe.live, routing all address-bar searches through that domain.

Print Easily overrides the browser's default search engine and routes all queries to quickprintapp.net with a persistent per-user tracking cookie.

QuickSearch - חיפוש בטוח silently overrides the default search engine and homepage to redirect searches to quicksearch.pro.

Search by ViewPDF sets hviewpdf.com as the default search engine and sends ad-tracking data from browsing history to viewpdf.com on install.

Twitch Enhanced Viewer appends Twitch auth tokens and device IDs to media proxy URLs by default.

Video Downloader Chrome contacts loaderchrome.com on install and stores server-supplied config that controls extension behavior at runtime.

Woodwo New Tab replaces every new tab with an instant redirect to www.woodwo.net.

Stylish transmits your full browsing history, link clicks, and Google search results to userstylesapi.com on every page navigation.

Ali Insider silently redirects AliExpress product pages through affiliate URLs and sends browsing data to its own servers.

Amazon Quick View by AMZScout accepts backend tasks to fetch Amazon product pages and return parsed page data to AMZScout.

City Scapes sets your browser's default search engine to landscape-extensions.com, an unbranded third-party search proxy.

GFormTasker redirects Google Forms submissions to gformtasker.xyz with answers and form metadata.

Netflix Dual subtitle for learning languages loads Netflix page code from Google Cloud Storage when a remote manifest enables it.

North Ad-Block transmits open-tab domains to its server on install and allows that server to push arbitrary JavaScript into every browsed page.

PiratBit - доступ из RUS routes all PiratBit domain traffic through a hardcoded third-party HTTPS proxy at xuyvamebanyerkn.woman-beauty.top.

ProBoost can stream page network, cookie, storage, console, and recording data to pagespy.microdata-inc.com after a gesture.

SEO-анализ сайта от Be1.ru fetches server-selected URLs and sends response content and headers to w.be1.ru.

Sixpence captures every page's network traffic and, on server command, silently scrapes hidden tabs and LinkedIn data to its own backend.