High risk browser extensions

Send Mass Mail + HTML inserter for Gmail sends visible page text to gpt.ga when its AI assistant generates answers.

Special Characters records extension UI sessions and sends replay events to tglens.tabgraf.com.

Suno AI Music Generator sends its login passport token to Alibaba ARMS telemetry during sign-in.

UFABC next sends university session cookies and page tokens to api.v2.ufabcnext.com.

Dark Reader for Chrome sends update data to dark-reader.com and applies server-provided programs in its service worker.

AroundDeal's B2B Contact Info extension reports every site you visit, not just LinkedIn, to its own backend while you're signed in.

The extension sends TEFAS portfolio and fund activity events to Google Analytics.

WhenX sends note text, labels, tags, related URLs, and Google search queries to Mixpanel analytics.

Sound-Booster fetches a remote catalog that can run JavaScript on all HTTP, HTTPS, and file pages.

Extrator de token Discord captures Discord account tokens from browser requests, localStorage, and Discord page modules.

Notix: Notion Web Clipper sends active-page cookies, localStorage, page text, URL, and title to its Notix side panel.

BeFrugal sends your installed extension list to its servers and can disable server-selected extensions.

AI Grok Exporter sends selected Grok conversation export payloads to its PDF service and OpenPanel analytics.

BinoBot sends Binomo authtoken and device_id cookies in a remote-configured WebSocket connection URL.

LoadHunter sends supported factoring-site cookies, login tokens, and form credentials to api.loadhunter.io.

Mail Seen sends outgoing Gmail message details and body text to its tracking API when you click Send.

MeaVana sends stored auth tokens to PostHog when logout analytics run after token failures.

Top Best Extension sends each top-level navigation URL and open-tab count to top-best.com.

AdSkipper receives remote configuration from extsoft.info that can inject scripts into visited HTTP and HTTPS pages.

Free VPN VNNet sends proxy credentials to any website that requests HTTP authentication while connected.

ChatGPT to PDF sends ChatGPT conversation HTML and page metadata to chatgptpdf.tech when exporting PDFs or DOC files.

Datagma uploads Outlook, Kaspr, and Lusha authentication tokens and cookies to Datagma servers.

Notepal sends WeRead note and highlight contents to Mixpanel when sync errors occur.

SteamAuth sends Steam trade watcher webhooks the user's steamLoginSecure cookie and trade offer details.

Titans Pro sends Amazon and Etsy search data, page URLs, and cookies to go.selfpublishingtitans.com.

UchiX sends Uchi.ru access tokens and school account details to api.cdz.rip while solving tasks.

WorkingVPN can load fallback API hosts from GitHub and send login credentials to those hosts when its normal APIs fail.

AdGuardX AdBlocker fetches remote rule text from adguardx.com and injects decoded JavaScript into HTTP(S) pages.

The extension sends Twitch auth-token cookies and playback Authorization headers to tw4.finargot.ru while unlocking streams.

Beyond Connect sends Airbnb login identifiers and 2FA codes to LogDNA telemetry.

Bypass Telegram Web records authorization and cookie headers from browser requests and can copy captured tokens.

Convert Label forwards failed Vinted API request headers and bodies to convertlabel.com for error reporting.

eBextractor sends eBay purchase-history page HTML and page cookies to wcawasa.pythonanywhere.com when local parsing fails.

达连-让TikTok达人邀约更简单 fetches and runs replacement JavaScript from cdn.kollink.net.

ReYohoho Twitch Proxy sends the Twitch auth-token cookie to its rte.net.ru proxy servers.

Twitter & X Video Downloader sends site cookies from matched social-media pages to api.x-downloader.com.

All-Inclusive CRM executes JavaScript returned by allinclusivecrm.com on supported operator login pages.

Android developer Cordova online sends top-level browsing URLs to www.uptoplay.net.

Pixiv Downloader sends download details and Google account identifiers to a Google Apps Script endpoint.

Shopping & Tracking Helper downloads redirect rules that can change matching shopping page navigations.

Stream Live sends VKVideo localStorage auth data to its backend during the sign-in flow.