Low risk browser extensions

YouNow Screen Share Extension lets YouNow pages and HTTPS localhost pages request screen-sharing source IDs.

YouTube Ads Silencer loads Google Fonts from remote Google endpoints when its popup opens.

YouTube Audio Selector shares stored language preferences with pages on YouTube.

YouTube Enhancer copies the saved YouTube Data API key into page-readable DOM on YouTube pages.

Youtube Mix to Shareable Playlist sends YouTube mix conversion counts and playlist type to PostHog.

Youtube Music Together sends host track metadata from YouTube Music rooms to music.eraycan.com.

Youtube Right Side Comments loads popup fonts and stylesheets from Google Fonts and BootstrapCDN.

YoutubePreamp loads Google Fonts and a GitLab image while injecting its YouTube interface.

ZenUML Sequence loads Google Fonts from its extension workspace, sending extension-use network metadata to Google.

The extension sends visible Mercado Livre listing IDs and marketplace metadata to its backend.

close_tab(s) lets webpage-triggered injected controls close the current tab or neighboring tabs.

dScribe Data contacts dScribe APIs from HTTPS pages outside dScribe when you are signed in.

find-your-product-on-meesho injects a Meesho inventory banner controlled by GitHub JSON and tracks banner events with Mixpanel.

fnaf 4 online sends a persistent extension UUID and game or notification interaction events to yoki.games.

fontSwap sends extension error reports that can include the current tab URL to a Cloudflare Worker.

gn-math loads its game page HTML and scripts from jsDelivr when the extension page opens.

iDocCar Helper sends downloaded PDFs and document uploads to iDocCar's OCR API with a bundled API key.

iTop VPN checks your public IP through cleartext IP-location services when its popup opens.

ip8.com extension answers matching website messages with its Chrome extension ID on HTTPS pages.

mei's lens lets any page trigger extension-privileged downloads after its lens UI is activated.

notionClipper exposes its AI summary iframe so web pages can send prompts through the user's ChatGPT session.

oneClipper exposes a hardcoded Google Gemini API key in a web-accessible clipping script.

pFinTools.com sends active tab URLs to Google Analytics and can report Amazon product-page details to Google Apps Script.

scale.jobs sends active job-page URLs and extracted job details from its side panel to api.scale.jobs.

uSuperDrag lets any webpage open an attacker-chosen tab through simulated drag-and-drop events.

VPN for Twitter X loads remote proxy configuration and uses bundled proxy credentials to route Twitter/X traffic.

✔️ ส่วนขยาย IDM can let any web page trigger extension-privileged downloads for image URLs.

纳米AI助手 sends page URLs and titles with a persistent extension UID to 360 analytics when its assistant UI appears.

讯飞星火：每个人的AI助理 sends the first 100 characters of page text from HTTP(S) pages to Xunfei's servers.

購有錢-比價賺現金小幫手 records a rolling local history of full URLs from top-frame browsing.

速卖通选品助手 exposes a message bridge that lets localhost pages read cookies and proxy browser requests.

Yandex Wordstat Assistant stores saved keyword phrases and counts in Yandex Wordstat page storage.

YouTube Downloader Plus removes frame-blocking and content-security headers from every page response.

Viking Deals sends error reports from its all-sites content script with stored account id and email attached.

Youtube AgeRestriction Unblocker rewrites YouTube watch URLs to open matching nsfwyoutube.com pages over HTTP.

Download Dailymotion videos sends persistent install and runtime metadata to pbion.com telemetry.

Viewstats records YouTube viewing and interaction events and sends them to api.viewstats.com.

Enkrypt exposes wallet settings, including its analytics UUID, to web pages through its injected bridge.

Ready Wallet injects an in-page bridge on every site and exposes its extension ID in the page DOM.

Ban Checker for Steam sends Steam Web API keys to api.steampowered.com when checking ban status.

Flickr Size Pickr injects Flickr API image URLs into the active Flickr tab without escaping them.

YouTube Tags sends YouTube watch-page video IDs to Google Analytics with a persistent extension client ID.

I'm not robot captcha clicker automatically clicks visible Google reCAPTCHA checkboxes in pages you visit.

Smart Image Downloader injects a page script on every site that can decrypt and run code supplied through page meta tags.

YouTube Video Downloader - For Context Menu rewrites matching page links through affiliate URLs fetched over HTTP.

Shodan.io (DEPRECATED) sends each visited website hostname to Shodan lookup APIs.

dataslayer lets any website turn off its analytics-request blocking rule through a page message.

BILD - Bundesliga-News & Ergebnisse sends stored BILD consent strings to Sport BILD's video stream service.

DraftSharks Sync embeds a Yahoo OAuth client credential and uses it when exchanging Yahoo authorization tokens.

Password Depot Extension forwards WebAuthn create/get requests from any site to its native Password Depot host.

Surfingkeys lets any web page send editor commands through its native Neovim bridge.

Sticky Notes embeds an OAuth client secret and sends it to its token endpoint during login.

HTML5 Video Everywhere reports supported-site injection counters to api.admin.tik.tn after version changes.

Easy RSS requests Google favicons for feed domains shown with unread entries.

Netflix Bilingual Subtitles exposes its stored user token to scripts running on Netflix pages.

Duolingo Max modifies Duolingo scripts and profile responses to show paid features and unlimited hearts.

MYNT: Material You New Tab asks ipinfo.io for an IP-based location and sends the resulting coordinates to WeatherAPI.

VirusTotal Scan sends context-menu link URLs to VirusTotal with an embedded API key.

Google Dark Theme loads a Flaticon image from Google pages where its injected dark-theme CSS matches.

Extended Color Management exposes its color-management state to every website you visit.