Low risk browser extensions

GQueues Chrome Extension sends your GQueues account identifier and product tier to Google Analytics.

GQueues for Google Calendar sends account-key and calendar-task interaction events to Google Analytics.

GSC Guardian blocks right-click, source-view, and common DevTools shortcuts on Google Search Console pages.

GamerPay extension lets allowed Steam and GamerPay pages use its bridge to read pending trades and send inventory data.

GateKeeper Password Manager communicates with a localhost credential API over HTTP when HTTPS is unavailable, sending session tokens in the URL.

Genius PRO fetches blocking rules over plaintext HTTP and installs returned domains as browser-wide block rules.

GeoSpoof sends your public IP address to external IP and geolocation providers during VPN sync.

Ghost Downloader lets any web page make it open ffmpeg.bmmmd.com and send it file URLs to fetch.

GigaBrain - AI Companion for Reddit sends Amazon product page details to thegigabrain.com when you view product pages.

Gladiatus Crazy Add On deletes localStorage entries used by competing Gladiatus bot scripts on Gladiatus pages.

Google 100 Results loads popup styles and fonts from Cloudflare and Google CDN servers.

Google Docs Image Zoom loads GitHub and Ko-fi images when you open its popup.

Grammarly Dark loads its popup stylesheet from unpkg.com when the popup opens.

Grepolis Report Converter Revolution Tools loads remote scripts from grcrt.net and Google Tag Manager into Grepolis game pages.

GrowthBook DevTools lets any webpage overwrite its saved API host and API key through a postMessage bridge.

HBO Max Picture in Picture sends your Max watch history and profile details to me3x.online and metricsmint.quest.

HBO Max Speeder sends your Max viewing history and live-event activity to me3x.online and profile details to metricsmint.quest.

HP Dynamic Audio captures URLs, page titles, and media sources from streaming sites and forwards them to a locally installed native app.

Horus Web sends active-tab hostnames with local Horus agent identifiers to Horus BI endpoints during navigation.

Hulu Speeder: adjust playback speed [QVI] uploads Hulu watch history and profile identifiers to me3x.online by default.

IBM Connections Cloud Meetings bridges IBM Sametime meeting pages to a local native messaging host using a payload-field origin gate instead of event.origin.

ICBCAssistChromeExtension bridges ICBC bank web pages to a locally installed native application via native messaging.

IP Whois sends active-tab site IP geolocation lookups to ip-api.com over plaintext HTTP.

IPVanish Secure Browser lets any webpage display attacker-controlled HTML on its extension error page.

ITA Matrix Powertools sends clicked booking links and the current Matrix page URL to Skimresources by default.

Iago - Learn Japanese through TV sends supported streaming-page URLs to Iago with a persistent extension device ID.

Image Downloader Pro Tool injects a page-visible DOM marker derived from its extension ID on every website.

Inbox When Ready for Gmail sends Gmail account identity and usage traits to Mixpanel analytics.

Istoric Preturi applies API-supplied regexes to product-page HTML and sends captured matches to its API.

J7Extension captures Axiom tracked-wallet and own-wallet details for its local highlighting panel.

JabRef Browser Extension fetches translator scripts from repo.zotero.org and executes them in active tabs without integrity checks.

Jazz-MIDI exposes a native MIDI host to any website via a CustomEvent bridge with no origin filtering.

Kakadu VPN: One Family routes browser traffic through a Kakadu-provided HTTP proxy when VPN mode is connected.

KarmineCorp sends a persistent extension identifier and selected notification preferences to api2.kametotv.fr.

Kiosk Extension writes its plaintext admin unlock password into a visible page element, readable without logging in.

Kwai Pixel Helper removes CSP and X-Frame-Options headers from every sub-frame response and rewrites frame user agents.

Laitis Browser Extension relays commands from a local native app to inject scripts, proxy HTTP requests, and read content from any web page.

Lingvanex sends the user's plaintext email address to PostHog analytics on every account login.

LinuxDo Scripts sends linux.do forum content to user-configured AI API endpoints and backs up settings to a user-configured WebDAV server.

Lofi Girl contacts geolocation-db.com from its popup to infer the user's country on first open.

Lumina Night Mode fetches cross-origin stylesheets and places their contents into page-readable DOM.

MSN Homepage, Bing Search & News sends a Bing MUID cookie and persistent machine ID to g.ceipmsn.com during telemetry pings.

MYO Studio sends icon search requests with an embedded Yotoicons API key.

MailMaestro reports the active Gmail account email address to app.maestrolabs.com when Gmail loads.

McAfee SafeKey fetches server-controlled JavaScript from its vendor and executes it in every page's DOM.

MeetMe Dolby Voice 1.1 relays postMessages from any web page to a native messaging host with no origin validation.

Microsoft Bing Homepage & News sends persistent Bing and local identifiers to g.ceipmsn.com over HTTP.

Mokku exposes saved mock responses and header rules to any website through its page message bridge.

Multi Skipper sends streaming profile details and continue-watching history from several services to external analytics endpoints.

NanoInfluencer.ai exposes its extension manifest and persistent app ID to any top-level web page.

Next Experience Developer Tools exposes its persistent extension ID to page scripts on every website.

NipahTV sends the user's Kick channel presence to 7tv.io when its default-enabled 7TV add-on runs.

Notepad++ Online loads a remote page from winfy.net in its popup instead of providing a local editor.

OnHub Recovery Utility sends recovery target and USB drive details to Google Analytics when crash reporting allows it.

Onion's Revenge loads a news panel from fn.onionfist.com and inserts the returned HTML into its popup.

OpenMask lets a page supply the dApp origin used for wallet authorization checks.

OpenTabs sends new-tab search terms and its click_id cookie to p.opentabs.org.

Ostendo sends YouTube feature-use events with a persistent extension client ID to Google Analytics.

PDF Combine - Convert and Merge sends a bundled Online-Convert API key with remote conversion requests.