Low risk browser extensions

waView, Image Viewer and Editor opens waview.newappzone.com in a new tab when its background worker first starts.

VPN ZERO supplies bundled SOCKS proxy credentials to vpnzero.ru proxy servers when its VPN is enabled.

Телеканал Дождь sends extension page routes and video or article titles to a remote analytics iframe.

易用侧边栏 Pro removes Content-Security-Policy and X-Frame-Options headers from embedded page responses.

전화번호안심로그인(PC) embeds a SafeConnect API Basic credential used to request access tokens.

Definer lets any webpage trigger dictionary or AI lookups through the extension without checking the message origin.

Smart Video & Audio Downloader sends the current page URL to messaging frames and lets them add page elements.

cat-catch-re-tiktok records media request URLs and selected headers across sites, including cookies and authorization headers when present.

VK Music - download music VK sends a persistent Google Analytics identifier on startup before opt-in is chosen.

Snapchat web changes Snapchat camera and microphone permission checks into media access requests.

Windowed lets any web page ask its content script to move the current tab into an extension-created popup window.

Holodex Plus lets embedded YouTube live-chat pages send chat text through its content script.

musescore-downloader uses bundled Musescore API tokens to request score files from musescore.com.

Web Paint saves user-created drawings to the current page's local browser storage after the tool is used.

Auto HD/4k/8k for YouTube injects a page-visible script ID containing its extension runtime ID on YouTube pages.

Apia digital signature lets matching webpages send local signing data to its native signing host.

遊戲橘子擴充元件 marks every website's page to show whether its native beanfun client is installed.

Bionic Reader imports Google Fonts CSS on webpages where it auto-applies its reading style.

Pinterest Dark Theme loads popup stylesheets from Google Fonts and cdnjs when its toolbar popup opens.

Web Translate lets opened editor pages remove frame-protection headers for subframes in the current tab.

ContextSearch web-ext lets web pages prompt users to save attacker-supplied search templates through its add-engine page.

Kinozal Unofficial fetches Kinozal status config and can inject an a-ads.com iframe on Kinozal pages.

Twitter File Downloader sends download-count and traffic-usage statistics to MediaHarvest servers.

Reading List requests DuckDuckGo favicons for the hostnames saved in your reading list.

Speed Booster for ChatGPT changes ChatGPT page rendering to keep long conversations responsive.

Red Shield VPN sends a per-install device code in DNS-over-HTTPS TXT lookups to public resolvers.

CopyTabTitleUrl reads the active tab's document.cookie when its scripting copy option is enabled.

Lettres et CVs sends Google search queries and extension identifiers to lettres-gratuites.azurewebsites.net after consent.

Coloriage Plus sends a persistent extension ID and install timestamp to coloriage.azurewebsites.net on Google searches.

1stream Client sends page hostnames to a bvoip endpoint when its webclient injection runs.

AI Code Generator sends your Chrome profile Google ID to livepolls.app during setup.

AI Compare sends comparison prompts to aicompare.club and uses GitHub-hosted rules to automate AI sites.

AIHR Member Start Page records its new-tab page with Datadog RUM session replay.

AIVA sends ChatGPT account identifiers and a device fingerprint to app2.aiva.best when ChatGPT loads.

AdTech.dev Ad Inspector collects ad-tech, bidder, identity, consent, and page URL data from every site into browser storage.

AeroKick lets matched Kick and AeroKick pages use a message bridge to call extension fetch and storage proxy methods.

Agent Quick Tools removes shopping-agent risk warnings and auto-confirms LitBuy purchase notices.

Agoda Saver reads Agoda hotel page details and shares saved price results with Agoda Finder pages.

Alibaba Image Downloader downloads images and videos from shopping pages and uploads chosen images to image-search services.

Altmetric for Pubmed and Google Scholar sends page .docsum-pmid text to api.altmetric.com as PubMed IDs.

Amazing Screenshot and Annotate Tool lets any webpage trigger its screenshot shortcuts for the active tab.

Amazon Subscribe & Save one-click cancel sends Amazon-page error reports and page details to Raygun when crashes occur.

Amz Price History Pro copies the stored Keepa login token into localStorage on matched 127.0.0.1 pages.

Apollo Scraper sends Apollo page HTML, URL, and user/config state to o.scraper.plus when selector checks fail.

App for WhatsApp and Messenger access removes security headers on messaging and social sites.

ArmRadio fetches its station catalog over HTTP and plays station URLs supplied by that catalog.

Askusdaily sends Chrome Top Sites hostnames to Google's favicon service when its new-tab page opens.

AssetConnect fetches ad configuration from ads.sakurayuki.dev and can load remote ad images when its popup opens.

Atria Chrome helps save ads from social media pages into Atria.

Attack On Titan Levi Wallpaper sends top visited site URLs to Google's favicon service on the new-tab page.

Autify Recorder (New) turns page-sent keystroke messages into Chrome Debugger key presses during recording or replay.

AutoRemote sends entered short device URLs to Google URL Shortener when adding a device.

Autotype - Free Text Expander accepts webpage messages that insert supplied HTML into the focused editable field.

Autoview.com Trading Extension modifies Origin and Referer headers on requests to trading and exchange domains.

BMW M3 Neon Night Drive Live Wallpaper sends saved shortcut URLs to Google for favicon loading.

BMW M3 Neon Night Live Wallpaper New Tab loads popup HTML from api.gameograf.com on its new-tab page.

BMW M4 CSI Night Dirft Live Wallpaper loads Google Fonts resources each time its new-tab page opens.

BMW M4 City Ride Live Wallpaper loads remote popup HTML into its new-tab page.

Backspace for Navigation lets page-generated Backspace events close the current tab when close-on-history-top is enabled.

Backstory places its extension runtime ID in the page after you activate it on a tab.