Low risk browser extensions

Redgif Video Downloader scans every site for GifPreview elements and passes matching page details to its background script.

YouTube Tags sends YouTube watch-page video IDs to Google Analytics with a persistent extension client ID.

1688 Chat Tuesday API Extension reads full page HTML from every HTTP and HTTPS site after the page loads.

2TOOL - Auto Mời GROUP trên facebook starts Facebook group invites from a URL flag on group pages.

55PBX Web Softphone opens its webphone page when any site sends it a same-page message.

720 - No USD (V5) lets any visited page use hidden DOM commands to open, focus, navigate, or close extension windows.

AAWP loads a remote logo image from cdn.getaawp.com when its extension pages open.

ABlock replaces selected websites with a developer-supplied warning overlay.

AI Compare sends comparison prompts to aicompare.club and uses GitHub-hosted rules to automate AI sites.

AI Image Prompter fetches GitHub-hosted feature JSON and inserts its prompts, captions, titles, and images into AI-site pages.

AI to Human Text initializes Amplitude session replay that can send popup and expand-page DOM activity to Amplitude.

APTEAN AI (PREVIEW) sends scoped page metadata and selected text to Aptean's AI assistant iframe.

Academics lets any website set API auth state that later feeds requests to addons.ebibliophil.ro.

Ad Skip for YouTube writes its extension ID and base URL into YouTube pages.

Ad-Blocking - YouTube & Websites sends visited page URLs, referrers, and page links to service.allblock.app.

AdLib Pro sends Facebook Ad Library creative IDs to monitoring.svc.extention.site even when its reach-fetching switch is disabled.

Adena trusts page-supplied origin fields, letting websites impersonate connected dApps for account access and approval prompts.

Adventure Time Wallpaper sends top visited site URLs to Google's favicon service on its new-tab page.

Agent Station - Extension sends navigation and active-tab URLs to a local URL-extractor service.

Agent Warning Remover & Quick Buy rewrites supported shopping-agent URLs to use the extension author's affiliate codes.

AiPrice Search by Image for Walmart can silently reroute your clicks on Walmart product links through its own affiliate-tracking redirect.

AliExpress AdBlocker and Booster sends a persistent user ID and tab-count state to user.addon-analytic.com.

AliExpress Parcels - My Orders injects jQuery from code.jquery.com into AliExpress Russia order pages.

Amazon Chat Tuesday API Extension reads and sends the full HTML of every HTTP and HTTPS page after an 8 second delay.

Amazon Review Scraper sends a stored TurtleTasks username to its access-check API with an embedded API key.

Amazon SiteStripe Alternative loads a developer-hosted image beacon when its popup opens on Amazon pages.

Anime Car Drift Live Wallpaper - JDM Racing New Tab Wallpaper sends custom shortcut URLs to Google's favicon service.

AnyTab Laser Pointer sends usage counters to leadsandconversion.com and loads galileoconsulting.ee on every page.

Anytime Wherever loads Google Fonts on its new tab page, sending each new-tab request to fonts.googleapis.com.

Apollo Scraper sends Apollo page HTML, URL, and user/config state to o.scraper.plus when selector checks fail.

Apple TV Speeder sends Apple TV viewing, subscription, and account profile data to metricmuse.xyz and metricsmint.quest.

Arcrawls posts AI chat prompts and page text into the page window on all sites.

AskCuddy sends selected page text and user-selected screenshots to its API with a stored customer ID.

Audio Booster for Amazon Prime [QVI] sends Prime Video profiles, history, bookmarks, subscriptions, and contact details to remote servers.

Audio Booster for HBO Max [QVI] sends Max viewing history and profile data to me3x.online and metricsmint.quest.

Auto side preview strips site framing and request-origin headers while opening search-result previews.

AutoMOT exposes an iframe that lets any website trigger its MOT backend lookups using extension storage/auth context.

KeyCorrect treats password fields as autocorrect targets and can save typed password-field words in local extension storage.

Automatic zalo translator sends Zalo message text to its translation API over cleartext HTTP.

BMW M3 Neon Night Live Wallpaper New Tab loads popup HTML from api.gameograf.com on its new-tab page.

BMW M4 Live Wallpaper inserts remote popup HTML from api.gameograf.com into its new-tab page.

BTC Ticker sends configured market symbols to allcrypto.info over a plaintext ticker socket.

Banggood Price Tracker's content script accepts commands from a spoofed sender field instead of verifying the message's real origin.

Basket records page-load, unload, and click telemetry on server-selected sites and sends it to its API.

Better goSupermodel sends your goSupermodel account ID to its Vercel API once per day.

Black Panther Wallpaper sends up to 10 top-visited page URLs to Google's favicon service on its new tab page.

Blackjack loads popup styles from cdnjs and Google Fonts when you open it.

Blackpink Wallpaper sends top-site URLs from its new-tab page to Google's favicon service.

Block YouTube Shorts stores request headers sent to ChatGPT, including authentication-bearing headers.

Bloxgen reads Roblox credentials from login URL parameters and submits them on Roblox.

Branalyzer Brand's Instant Analyzer ships backend API access codes in its extension bundle.

Bunny & Rabbit Wallpaper sends your new-tab top-site URLs to Google's favicon service.

CCBrowser by Noves sends a bundled Noves API auth secret with Canton API requests.

CFCA CertEnrollment.YOCYL Extension lets allowlisted websites choose a native messaging host and relay messages through it.

CFCA CryptoKit.Induschain Extension lets allowed websites send selected payloads to a local native-messaging host.

CFCA CryptoKit.NCB Extension lets approved NCB web origins choose a native messaging host and forward payloads to it.

CFCA CryptoKit.YOCYL Extension lets many allowed websites choose and message a native application.

CS2 Float Checker ships a static SteamLedger API token used for its backend extension endpoints.

Capture by Tracker stores Tracker login credentials in reversible base64 and reuses them for Tracker API requests.

Capybara Live Wallpaper loads Google Fonts and sends user-added shortcut domains to Google's favicon service.