Low risk browser extensions

Halloween Cinnamoroll Pumpkins Spooky Cute Live Wallpaper sends shortcut URLs to Google's favicon service.

Halo Infinite Wallpaper sends URLs from your most-visited sites to Google's favicon service.

Hanako Kun Wallpaper sends up to 10 top-site URLs to Google when rendering its new-tab Most Visited menu.

Health Search Pro sets itself as the default search provider and sends usage counters and IDs to its own servers.

HealthGuard embeds NewsGuard API credentials and uses them to request anonymous tokens and content-label services.

Helcim Payment Extension sends page URLs and Helcim account settings from supported billing sites to Datadog.

Hello Kitty Friends Live Wallpaper sends saved shortcut URLs to Google's favicon service when it renders the new-tab page.

Hi Translate extension sends selected text, page text, WhatsApp messages, and YouTube captions to api.translasion.com.

HiddenBatVPN stores its proxy authentication password in persistent local extension logs.

Hide Mouse for Hulu loads a remote c.stoopid.fun image when its popup is opened.

Highlight IP Lookup sends selected text from the active page to ip-api.com for IP location lookup.

Hilltoppers sends extension analytics events and an embedded API secret to Google Analytics.

Hinkal Wallet lets any website switch the wallet's active blockchain network without a session check.

Hirecarta sends autofill field values, selectors, page URLs, and local storage identifiers to hirecarta.com analytics.

Holiday Calendar fetches regional calendar data over plaintext HTTP from calendar-crx.diary8.com.

Hologram runs on video meeting sites to provide virtual avatar and video features.

Homer Simpson Live Wallpaper sends new-tab shortcut URLs to Google's favicon service.

Homie VPN routes user-enabled browser traffic through remote proxy nodes from api.freeproxy.online.

Honda Civic Type R Live Wallpaper sends user-added shortcut URLs to Google's favicon service.

Honey Hive queries PayPal Honey's private API for every domain visited, spoofing browser traffic to evade bot detection.

Hotel Ninja sends booking and confirmation page details from travel sites to reports.hotel-ninja.com.

Howdy - AI Messages Assistant lets matched external pages query your Instagram account through extension cookies.

Howl.Link captures the current page URL, OpenGraph image, and OpenGraph title on every matched site.

Hulu Extended injects Google Fonts on Hulu pages, causing those page visits to request Google-hosted font resources.

Huru sends the current page's full HTML to its Supabase function when you create an interview.

HybridTV Dev Environment lets HbbTV pages navigate the tab and rewrite User-Agent headers.

Hyros Talk has no confirmed data-recipient behavior recorded in this scanner.

ICC Cricket Updates loads cricket scores and ranking HTML from an unauthenticated HTTP API into its popup.

The extension sends visited website hostnames to MiniITS for logged-in users when its content script loads.

IITG AutoLogin++ stores IITG login credentials locally with a hardcoded encryption key and submits them to the campus portal.

Importador de Notas Mineduc sends teacher identity details and a stable browser fingerprint to its license API.

Infera Lite sends its bundled backend API key to Infera endpoints during job-count and link-status checks.

Iniciar conversa pelo Whatsapp WEB injects a Google Fonts stylesheet into WhatsApp Web.

IGLikesExport sends selected Instagram media identifiers to a RapidAPI Instagram likes endpoint during exports.

Instagram Audio Downloader sends Instagram TV page URLs to an Aliyun logging endpoint during automatic page handling.

InstantDocs exposes a page message bridge that can start its desktop recording flow from any website.

International Hustlers accepts Retool auth callback tokens and stores the email they contain locally.

Itachi Uchiha - Black Cloak Live Wallpaper sends saved new-tab shortcut URLs to Google's favicon service.

Izza Bot exposes its Izza backend auth cookie to scripts running on the WhatsApp Web page.

JD Data Extractor sends scraped JustDial lead data to a hardcoded HTTP server before export.

JDM Cursor inserts a visible style marker on every site that includes part of its extension ID.

JOSEPHA sends the current page URL and location/account metadata to Firebase and PostHog during price searches.

JSON Tools sends popup page views, button clicks, and persistent client/session IDs to Google Analytics.

JSONGrid Web Inspector sends usage events with a persistent client identifier to Google Analytics.

JUAN marks crypto cashtags on X pages and exposes matching saved portfolio details in page DOM tooltips.

JW Web Add-on imports Google Fonts in its popup, sending a font request to Google when the control panel opens.

Japanese Spring Live Wallpaper sends user-added shortcut URLs to Google to load favicon images.

Jinu - KPop Demon Hunters Live Wallpaper sends each new-tab shortcut URL to Google's favicon service.

JobFillr shows a success message that loads a Buy Me A Coffee image from cdn.buymeacoffee.com.

JobGlance sends visited job-posting details and a persistent extension UUID to its Supabase backend.

Jokes and Smiles - New Tab sends new-tab telemetry to Google Analytics and requests country data from ipapi.co.

K-Pop Demon Hunters: Starry Night Live Wallpaper sends shortcut URLs to Google for favicon images.

Kameleoon Graphical Editor lets pages trigger browser header changes that remove frame protections and spoof User-Agent.

Kansas City Chiefs Wallpaper sends your Chrome top-sites URLs to Google's favicon service on the new-tab page.

King Von Live Wallpaper sends saved new-tab shortcut URLs to Google's favicon service.

Koenigsegg Jesko Live Wallpaper sends saved shortcut URLs to Google's favicon service.

Komentaire Extension sends Amazon product IDs and page URLs to its Komentaire CDN endpoint.

Kuponer.cz lets any website trigger hidden background tabs to URLs supplied through its content-script message relay.

LBS数据采集 sends each visited hostname to scrm.maoxiaoqi.com and uploads scraped Maps business listings.