Low risk browser extensions

Flower Finder sends your Chrome top-sites URLs to Google's favicon service when its new-tab page loads.

Fluentez-extension rewrites Origin and Referer headers on XHR requests sent to api.fluentez.com.

ForU AI embeds API signing credentials and uses them on authenticated requests to its ForU API.

Formula1 Las Vegas Live Wallpaper sends saved shortcut domains to Google's favicon service on its new tab page.

Fortnite Cursor opens kinofilmslook.ru when users click its Rate Us control.

Fortnite Wallpaper sends Chrome top-site URLs to Google's favicon service on its new-tab page.

Forza Horizon 5 Wallpapers New Tab fetches notification HTML from api.gameograf.com for its new tab page.

Forzar Idioma en Google loads language flag images from FlagCDN when its popup shows Google language options.

Fotoexamen lets any website set its saved access token and sends screenshots to api.img2html.com for solving.

Frase sends selected page text to its AI rewriting endpoints when authenticated users invoke writing actions.

Free Logo Maker opens wixlogomaker.net with the logo text entered in its popup.

Free SEO Audit & Website Checker by Semalt can disable other installed SEO extensions based on a Semalt-hosted tag list.

Freename Web3 Extension sends top-level website hostnames to Freename resolver APIs as you browse.

Funlingo sends visible page text to Google Translate when you use its page translation feature.

Fushiguro Toji Hanging Jujutsu Kaisen Live Wallpaper sends saved shortcut URLs to Google's favicon service.

GAS Prettier + AI Completion injects a Perplexity socket bridge into Perplexity Labs pages.

GEE AI Assistant removes frame-protection headers from AI chat subframes across the browser.

GLB GE extension sends page HTML, screenshots and your IP to its servers on car-auction sites.

GOFF - Login Automático lets matching .pt pages send commands that open supported portals and fill login forms.

GOTSUGO reports Google Calendar parser errors to Sentry with the page URL and browser request headers.

GPT Breeze includes a bundled Pollinations API key for its default free AI model.

GPT-BOSS lets any embedding page ask its panel to fetch an image URL and upload it to vkboss-light.super-smm.com.

GST Calculator Free loads Google Tag Manager when its popup opens.

Galaxy Wallpaper sends saved new-tab shortcut URLs to Google's favicon service.

Galaxy-Newtab sends each Chrome top-site URL to Google's favicon service when its new-tab page renders.

Garden Lake Minecraft Live Wallpaper sends shortcut URLs to Google's favicon service on its new tab page.

Gato en la Web injects Tenor-hosted cat GIFs into every HTTP and HTTPS page you visit.

Geo Hound uploads discovered GIS service URLs and the browsing page URL to Supabase with a persistent user ID.

German Pronouncer Extension injects an Imgur-hosted icon into pages you visit.

Get Full Text Research sends article details, institution IDs, page URLs, and an installation ID to GetFTR servers.

Get Weather Now sends automatic geolocation requests to ipinfo.io using a bundled API token.

Gimkit Hacker injects a persistent browser-warning banner on every visited page linking to gimvrowser.vercel.app.

Gladiatus Helper Bot sends in-game private and guild message text to its Telegram webhook backend.

Glance sends PDF title candidates and the active tab title to BigModel when it renames PDF downloads.

Global Clock loads Font Awesome from cdnjs.cloudflare.com whenever its new-tab page opens.

Gmail Inbox Zero by cloudHQ collects Gmail account-switcher email addresses and sends them to www.cloudhq.net.

GoEmailTracker sends your Gmail address to its tracking domains when tracked pixels load or tracked links are clicked.

GoingMed sends journal names, PubMed IDs, and DOIs from academic pages to publication lookup services.

Goku Black Rose Transformation Live Wallpaper sends shortcut URLs to Google's favicon service on each new-tab render.

Goku Destined Live Wallpaper New Tab fetches remote popup HTML from Gameograf and inserts it into the new-tab page.

Goku Falling Stars fetches remote message HTML and inserts it into its new tab page.

Google Drive Dark Mode lets any page ask its background worker to fetch cross-origin stylesheets and insert the response.

Google Meet Meat injects a meetmeat.gmeetmeat.xyz iframe into Google Meet pages.

Google Search Suggestion Extractor loads its popup stylesheet from stackpath.bootstrapcdn.com when opened.

Google Trends Everywhere sends Google search result domains and SimilarWeb traffic data to a Cloudflare Worker.

Google SERP Simulator by Semalt can disable installed SEO extensions from a Semalt-controlled ID list.

GotDibbs Toolbox for Dynamics 365/Power Apps reports the loading page hostname to Sumo Logic.

Graderoom lets allowed external pages request authenticated PowerSchool grade data through the extension.

Green Tree Search sends your frequently visited site URLs and titles to greentreesearch.com.

Grok to PDF embeds OAuth client secrets used when connecting Yandex Disk and Notion accounts.

Groups Watcher sends Facebook GraphQL requests with a spoofed Origin header and posts support/error details to Discord webhooks.

GuinRank-Write stores its extension URL in each site's localStorage when its content script runs.

Guinea Pig Wallpaper sends top-site and saved shortcut URLs to Google's favicon service on its new-tab page.

Gõ công thức toán LaTeX trong comment Facebook opens a CodeCogs LaTeX editor over unencrypted HTTP.

HG Insights Sales Copilot sends your Chrome profile email to MadKudu tracking endpoints on install and updates.

HKU Moodle Helper loads a third-party icon stylesheet on Moodle pages and sends submitted feedback to richku.com.

HTLiveSight reconstructs a Hattrick CHPP OAuth consumer secret from its shipped source.

Habit Tracker loads a Google Fonts stylesheet each time its new-tab page opens.

Haiku lets web pages ask its extension recorder to start microphone or camera capture.

Halloween Black Cat Live Wallpaper inserts popup HTML from api.gameograf.com into its new-tab page.