High risk browser extensions

AI Image of the Day sends each loaded HTTP(S) tab URL to Takeads and redirects tabs to returned tracking links.

APP For IG DM sends Instagram CSRF tokens and inbox API responses to Alibaba Cloud logs during auto-reply monitoring.

Searches for Android apps and starts APK downloads using Google Play Store app IDs as a reference.

Browse.live Web Safety can scrape configured page text or attributes and send them with page URLs to Browse.live.

CaptchaSonic uploads your installed-extension inventory and stable browser fingerprint after API-key setup.

Coin Search reports each visited page URL and hostname to coinsearch.cash when rewards are enabled.

Disney Plus Subtitle Translator - Dual Subtitles sends subtitle text, page context, and runtime/storage events to Amplitude.

DivMagic forwards selected page DOM content and page URLs to api.divmagic.com when export or save actions run.

Double sends authenticated Xero page content and Xero cookies to prod.keeper.app.

FC 26 Coins Generator FUT captures your EA Ultimate Team session token and sends it to api.futfun.com.

FancyGPT sends saved ChatGPT conversation text to its Firebase Storage bucket when its chat editor opens.

Find WhatsApp Link reads your WhatsApp account number and sends it to Aliyun Logs.

Ask Gene sends very large page text to its embedding backend when eligible pages become active.

Gmail Message Preview sends every signed-in Gmail address it finds to cloudHQ's servers.

Google Meet AI Translate reads the active Meet page for your account email and sends it to 5.44.46.205 over HTTP.

Hudu Assist records password-field keystrokes during Process Capture and can send saved steps to Hudu.

IMDb Ratings for Netflix removes Netflix page protections and injects JavaScript from lcdn.srvcdn.net.

Image Search injects every site and sends referrer data and Ethereum-provider presence to Mixpanel.

Immersive Reader - Improve Reading Accessibility sends login details and selected page text to Amplitude analytics.

MailChimp Templates for Gmail sends your Gmail addresses, including switcher accounts, to cloudHQ on page load.

Mass Friends Remover for Facebook | mobile posts the Facebook friends-page DOM to its server when page parsing fails.

Nome de Atendente para WhatsApp sends your WhatsApp account identifier to tbbc.app analytics from WhatsApp Web.

Proxy Switcher can route Chrome traffic through a hardcoded proxy when its Test Proxy button is clicked.

QSafe wallet sends a SHA-256 hash of the wallet mnemonic to QSafe's daily-login endpoint after unlock.

Rename Email Subject reads every signed-in Google account email from Gmail and sends the list to cloudHQ.

Schedule Email by cloudHQ reads every signed-in Google account email in Gmail and sends the list to cloudHQ.

Search & Chat AI injects server-supplied JavaScript into matched pages and accepts remote request-rule updates.

Search for Perplexity ai sends every keystroke typed in the address bar to perplexity-ai.online, a domain unaffiliated with Perplexity AI.

Share emails via secure URL link by cloudHQ sends every signed-in Gmail account address to cloudhq.net on Gmail load.

Translator fetches remote feature settings that can add configured elements to matching webpages.

UltraBlock sends each visited page URL and a persistent device ID to api.ultrablock.org as tabs finish loading.

Video Email for Gmail checks every signed-in Google account on Gmail load and sends the list to cloudHQ.

WA Self Sender & Easy Sender sends WhatsApp message bodies and recipient phone numbers to Aliyun Logs.

WAPI PREMIUM - Jaguar imports remote code into WhatsApp and stores WAPI login credentials in page localStorage.

Wavenet for Chrome sends selected text and the user's Google Text-to-Speech API key to Sentry after failed speech requests.