Low risk browser extensions

Joois QuickShortener sends an install-time geolocation request to geoplugin.net over HTTP.

K Searches sends hostnames from your top sites to Google's favicon service on the new-tab page.

KMITL + loads Google Fonts on KMITL schedule pages, sending those page visits to fonts.googleapis.com.

Keyboard Shortcuts to Reorder Tabs lets pages simulate shortcut keys that move the active tab.

Kuromi Live Wallpaper fetches remote popup HTML and shortcut definitions from Gameograf for its new-tab page.

Layerpath sends visited page URLs and domains from its all-sites content script to Dash0 telemetry.

Lebron James Wallpaper sends URLs from Chrome's top-sites list to Google's favicon service on the new-tab page.

Leet Xt sends the signed-in LeetCode username to a Cloudflare Worker and AWS Lambda URL once per day.

LeoMeasure copies Shopify custom pixel iframe dataLayer events into the top-level page when preview mode is enabled.

Lionel Messi Wallpaper sends top-site URLs from the new-tab page to Google's favicon service.

LionsTab sends Chrome top-site URLs to Google's favicon service when opening a new tab.

Load Spotter sends DAT truck posting details to Truckbase's auto-emailer API.

Lufe.ai sends text selected for translation to external translation services.

MOCO Zeiterfassung accepts unsigned embedded-page messages that can submit MOCO activity data through the extension.

MagicLinks sends Google search result URLs for partner domains to a.chipp.us with account identifiers.

Make it tool Extension sends extension event data with a stored client ID to Google Analytics.

MerchFlow for Merch by Amazon sends stored license keys and account identifiers to its analytics servers.

Mock:Intercept and directly return data exposes saved mock rules to every page and lets page messages change request hooks.

ModernLoop Extension can send ATS page details to a base URL set by allowed external pages.

My Custom Sports sends top-site hostnames to Google's favicon service when its new-tab page loads.

MyPicture for Netflix opens its survey page with a persistent extension-generated user identifier.

MyTravel Tab sends IP-derived location to its weather service and routes new-tab searches with stored identifiers.

N-bot sends your signed-in Teams account identifier and saved class timetable to nithins.me.

NCOverlay lets any website read and change its local extension storage through a page-message bridge.

NameMC Extras sends visited NameMC profile page URLs to gadgets.faav.top.

Nautica sends Chrome top-sites hostnames to Google's favicon service on its new-tab page.

New Tab Nature sends new-tab search terms to Amplitude with a persistent extension user ID and browser user agent.

Nocodable lets its web app request Facebook tracking identifiers and page context from Bubble editor pages.

NotedIt sends search-activity telemetry after redirects from its configured search provider.

One Piece Wallpaper sends precise browser geolocation to OpenWeatherMap for its new-tab weather widget.

TikTok Dễ Ẹc sends viewed TikTok shop-video URLs to resolver APIs when unlocking unavailable videos.

Open Prompt Manager places saved prompt titles, contents, and tags into the page DOM on permitted sites.

Orbit CME sends medical article browsing details, interaction counts, and installed extension metadata to orbitcme.com.

PDF Signer stores uploaded PDF contents in the browser's local storage so they reload when the page opens.

PDF Toolbox sends visited PDF page URLs to OffiDocs before opening them in its online viewer.

Password Generator stores generated passwords in extension localStorage when history is left on.

Peacock TV Picture In Picture [QVI] sends Peacock account and viewing data to me3x.online and metricsmint.quest.

Pikabu Fixes shares its Chrome extension ID with page scripts on Pikabu pages.

Pink Aesthetic Wallpaper sends your new-tab top sites to Google's favicon service.

PlayerTube places its synced YouTube player settings into the page DOM.

Poehalisnami CRM plugin exposes CRM notification contents to every website through an open shadow root.

PoliPlanifica sends ESPOL course and professor names to apipr.robtrivi.com when academic planning pages load.

Prime Sender Advance sends your IP address to ip-api.com over HTTP for locale detection.

Progressive Downloader sends download URLs, referrers, and cookies to its downloader service.

Prompt Tool - Midjourney Prompt Helper sends copied generated prompts with a UUID and IP profile to Aliyun logging.

PromptForge removes ChatGPT's CSP header and sends a detected ChatGPT account email to ext.promptden.com.

Qoruz adds a profile-insights panel to social profile pages and sends the current profile URL to data.qoruz.com.

Rayst - Reveal the web loads ray.st resources on visited pages and sends the current URL to app.ray.st when its panel opens.

Red Bull Formula 1 Car Wallpapers New Tab by Gameograf inserts remote Gameograf content into its new-tab page.

Reflect New Tab reads recent browser history for new-tab widgets and uses location data for weather and timezone features.

Reveal Deleted FB Messages captures Facebook WebSocket message contents and stores them in page-readable localStorage.

RevenueHero lets any webpage trigger its onboarding flow and open the extension options page.

Reverbify injects Google Fonts into Spotify pages, causing Spotify visits to request fonts.googleapis.com.

Roblox Player Server Searcher lets URL fragments on Roblox game pages trigger a Roblox game join action.

Rust Search Extension loads Google Fonts and cdnjs stylesheets in its management pages.

SHub - Chong phat hien chuyen tab hides tab switches and focus loss from shub.edu.vn pages.

SP Formatter lets any website overwrite its extension settings through a page message.

Saja Boys with KPop Demon Hunters Live Wallpaper displays popup HTML fetched from api.gameograf.com on its new-tab page.

Save Grok Chat as PDF loads a Google Fonts stylesheet when it injects its export button on Grok pages.

ScamCheck sends each visited site origin to Scamadviser for reputation checks.