Low risk browser extensions

Sparos sends the LinkedIn profile identifier from its overlay to api.sparos.tech when a user opens the contact panel.

Split Screen Pro removes frame and content security headers from sub-frame responses across all sites.

Split Tab removes Content-Security-Policy and X-Frame-Options headers from pages loaded in main frames and iframes.

Sports Engine sends Chrome top-site hostnames to Google's favicon service whenever its new-tab page opens.

Spy ADS uploads scraped Facebook Ads Library listing data to app.spyads.net.

Steam ID Finder sends Steam vanity names and profile IDs to Steam's Web API to resolve profile details.

SteamLevelU Extension writes its Chrome runtime ID into Steam Community page storage.

Stickr displays saved note titles and contents in page-readable controls on sites where notes are shown.

Stitch Live Wallpaper sends user-created shortcut URLs to Google's favicon service.

Sugar Connect accepts Gmail login tokens from web origins that only contain Sugar Connect domain strings.

Super Sports Car HD Wallpaper New Tab sends shortcut URLs to Google's favicon service when its new-tab page renders.

Surfer Search makes oasrchrdr.com the default search provider and sends omnibox searches there.

T-Rex Batman runner loads chess-master.info frames over HTTP in its options and update pages.

THE CKB Easybuy sends logged-in product-page visits to THE CKB with customer ID and full product URL.

TVExtBot 자동매매 embeds a Telegram bot token and uses it to send setup messages through Telegram's API.

Tab Limiter loads its options-page stylesheet from jsDelivr at runtime.

Task Monkey lets any website ask the extension to open task tabs and store supplied task context.

Taylor Swift Wallpapers fetches Gameograf popup HTML and shortcut data for its new-tab page and inserts it into the UI.

TeamCity Notifier lets any website save a TeamCity server URL and create notifications that open page-supplied links.

TechStack sends a FingerprintJS visitor ID and extension version to techstack.zeabur.app on GitHub repo pages.

Teemo Ai Auto Apply automatically opens and solves Google reCAPTCHA image challenges with bundled models.

TermOver AI sends visited-site hostnames and terms-page text to its backend for AI analysis.

Tessy exposes its configured server address to any webpage through a custom page event.

The Binding of Isaac Unblocked opens gnhustgames.org on install and when its toolbar button is clicked.

The Gay Agenda loads pride-flag images from Wikimedia whenever its popup is opened.

TheTab sends default GA4 telemetry with a persistent client ID and tab-manager event details to Google Analytics.

Ticket Templates for JIRA can expose saved Jira ticket templates to pages whose URL contains Jira-related text.

TikQuick sends a persistent install ID, TikTok profile fields, and upload metadata to tikquick.online.

Tinder Swipe Bot identifies signed-in Tinder users to Mixpanel from Tinder pages.

Toolsngon.com lets any website overwrite its saved Toolsngon auth tokens through a page message.

TorBox Control sends hashes of supported download links on visited pages to TorBox cache-check APIs.

TradingView Strategy Optimizer lets approved RoboQuant and localhost pages drive TradingView and read strategy/backtest data.

The extension sends SiliconFlow translation requests using a bundled default API credential.

TravelMonkey - new tab for travellers embeds a Google Analytics API secret in its analytics requests.

Tres CBO Live Connect accepts requests from any page to open its modal and send LiveConnect data with provider cookies.

TurtlesTab sends your browser's top-site URLs to Google's favicon service when opening a new tab.

TwExport embeds a Spotify OAuth client secret and sends it to Spotify's token endpoint.

TwiPlay can send Twitter tweet-detail responses to ext.twiplay.network when remote config enables collection.

Twitter Bookmarks Search by Twillot sends promoted tweet and advertiser IDs from X.com to apis.twillot.com.

Twitter X Viewer registers browser and extension metadata with its vendor endpoint on install and browser startup.

UPV Notas loads Font Awesome CSS from use.fontawesome.com when its popup is opened.

UUFinds-cnfans,mulebuy,acbuy,oopbuy,bbdbuy sends clicked shopping page and image URLs to UUFinds services.

Venom Live Wallpaper sends saved shortcut URLs to Google's favicon service when the new tab page renders.

Video Downloader One-for-All lets page messages trigger Facebook and Telegram cookie/header handling in the background.

tiktok video downloader - One Click tiktok video saver embeds a Supabase API key for subscription and usage-log requests.

Voa Health lets any webpage open its tutorial UI and send page-context telemetry to integration.voa.health.

WA Auto Reply sends WhatsApp page telemetry and a persistent client ID to Google Analytics.

WAExpresso sends the user's WhatsApp account number and usage counters to waexpresso.com during license checks.

WASender FREE Bulk Messaging Tool sends your WhatsApp account number to wa-sender.info when WhatsApp Web loads.

WELLDONE Wallet can trust a page-supplied dapp origin when deciding whether to return wallet accounts.

WassupBot sends WhatsApp profile names and phone numbers to wassupbot.com during account setup.

WeLoop.ai sends visited page URLs from most HTTP and HTTPS pages to its GraphQL API.

Web Client for Telegram - Teleside strips security headers from Telegram Web responses.

Web Proxy Per Tab sends configured proxy host data to ip-api.com over plaintext HTTP.

Web Vitals sends the active tab URL to Google Chrome UX Report when its popup loads field data.

Webtop.com Browser Extension lets Webtop and Desktop pages request history hosts and full bookmark trees.

What is my IP sends your public IP address to ip-api.com over cleartext HTTP.

WhatsApp Web Translator sends WhatsApp account details and translation text to its backend.

Wildhero - Eco-friendly Email lets Gmail page messages open attacker-chosen tabs without checking their origin.

World Clock loads selected timezone flag images from flagcdn.com in its popup on Windows.