High risk browser extensions

Emily reads full page text, Gmail threads, and LinkedIn posts from your browser and sends the content to api.meetemily.ai to generate AI replies.

Export Emails to Sheets enumerates every signed-in Google account email on Gmail and sends the list to cloudHQ.

HTML Editor for Gmail sends every signed-in Google account email to cloudHQ when Gmail loads.

Orbital Daggers injects server-controlled HTML into its popup from fn.onionfist.com and exposes extension storage to onionfist.com pages.

USPS Tracking replaces the browser's default search engine with trackingnumbers.org, routing all omnibox searches and partial keystrokes to a third-party operator.

Urban AdBlocker sends URLs, page titles, referrers, and request metadata from visited pages to Urban VPN.

View Maps & Directions replaces the default search engine with viewmapsdirections.com, routing all browser searches and autocomplete requests through its server.

View Package Tracking sets viewpackagetracking.com as your default search engine and sends every omnibox query and keystroke there.

Earth replaces your default search engine, routing every address-bar query and keystroke to earthapp.net.

Genspark AI Agent opens a persistent WebSocket to genspark.ai and executes server-sent commands to capture screenshots, read page content, inject input, and monitor network traffic on any open tab.

LoveDeals reports the host of nearly every site you visit to lovedeals.ai and scrapes your Google search result URLs.

GPT Reader intercepts the user's OpenAI session token on chatgpt.com and transmits account credentials to readeon.com.

FedEx Tracking redirects all omnibox searches to trackingnumbers.org and sets a persistent UUID tracking cookie that is restored if deleted.

Handz scrapes DOM data on every website and collects yad2 listing data via injected scripts, forwarding results to its own servers.

Meeting Scheduler for Gmail lists every signed-in Google account email and posts the list to cloudHQ.

Pi Lens reports authenticated YouTube playback progress to pi-lens-api.penpencil.co on play, seek, and page leave.

Pinukim replaces the default search engine and homepage with searchsafe.live, routing all address-bar searches through that domain.

Print Easily overrides the browser's default search engine and routes all queries to quickprintapp.net with a persistent per-user tracking cookie.