Low risk browser extensions

Iniciar conversa pelo Whatsapp WEB injects a Google Fonts stylesheet into WhatsApp Web.

IGLikesExport sends selected Instagram media identifiers to a RapidAPI Instagram likes endpoint during exports.

Instagram Audio Downloader sends Instagram TV page URLs to an Aliyun logging endpoint during automatic page handling.

InstantDocs exposes a page message bridge that can start its desktop recording flow from any website.

International Hustlers accepts Retool auth callback tokens and stores the email they contain locally.

Itachi Uchiha - Black Cloak Live Wallpaper sends saved new-tab shortcut URLs to Google's favicon service.

Izza Bot exposes its Izza backend auth cookie to scripts running on the WhatsApp Web page.

J7Extension captures Axiom tracked-wallet and own-wallet details for its local highlighting panel.

JD Data Extractor sends scraped JustDial lead data to a hardcoded HTTP server before export.

JDM Cursor inserts a visible style marker on every site that includes part of its extension ID.

JOSEPHA sends the current page URL and location/account metadata to Firebase and PostHog during price searches.

JSON Tools sends popup page views, button clicks, and persistent client/session IDs to Google Analytics.

JSONGrid Web Inspector sends usage events with a persistent client identifier to Google Analytics.

JUAN marks crypto cashtags on X pages and exposes matching saved portfolio details in page DOM tooltips.

JW Web Add-on imports Google Fonts in its popup, sending a font request to Google when the control panel opens.

Japanese Spring Live Wallpaper sends user-added shortcut URLs to Google to load favicon images.

Jinu - KPop Demon Hunters Live Wallpaper sends each new-tab shortcut URL to Google's favicon service.

JobFillr shows a success message that loads a Buy Me A Coffee image from cdn.buymeacoffee.com.

JobGlance sends visited job-posting details and a persistent extension UUID to its Supabase backend.

Jokes and Smiles - New Tab sends new-tab telemetry to Google Analytics and requests country data from ipapi.co.

JoyaGoo Warn Reminder Remover rewrites product-page referral parameters on scoped shopping sites.

K-Pop Demon Hunters: Starry Night Live Wallpaper sends shortcut URLs to Google for favicon images.

Kameleoon Graphical Editor lets pages trigger browser header changes that remove frame protections and spoof User-Agent.

Kansas City Chiefs Wallpaper sends your Chrome top-sites URLs to Google's favicon service on the new-tab page.

Kastle treats wallet requests from embedded frames as if they came from the connected parent site.

King Von Live Wallpaper sends saved new-tab shortcut URLs to Google's favicon service.

Koenigsegg Jesko Live Wallpaper sends saved shortcut URLs to Google's favicon service.

Komentaire Extension sends Amazon product IDs and page URLs to its Komentaire CDN endpoint.

Kuponer.cz lets any website trigger hidden background tabs to URLs supplied through its content-script message relay.

LBS数据采集 sends each visited hostname to scrm.maoxiaoqi.com and uploads scraped Maps business listings.

Lamborghini Aventador Live Wallpaper New Tab loads remote popup HTML into its new-tab page.

Lamborghini Live Wallpaper inserts remote HTML from Gameograf into its new tab popup.

Lamborghini Revuelto Live Wallpaper loads remote popup HTML from api.gameograf.com into its new-tab page.

Laya Tree lets page scripts send inspector commands that read and modify Laya game objects.

Lazuli inserts remote teacher-score feed values into ZJU course-selection pages as HTML without escaping.

Legal Forms and Agreements opens selected legal-document links on LawDepot over cleartext HTTP.

Leganto Cite it! Bookmarking Tool lets any website ask the extension to reload an open tab.

Lets Kick It! loads a BetterTTV sound asset when matching Kick chat keywords appear.

Letterboxd Streaming Providers bundles a decodable TMDB API bearer token and sends it to api.themoviedb.org.

Librezam can send recorded audio samples to ACRCloud when its default recognition credentials are enabled.

LightningProxies Extension supplies stored proxy credentials to every HTTP authentication challenge.

Lingo Champion sends selected words and matching visible page sentences to lingochampion.com for translation.

Lionel Messi Live Wallpaper sends saved new-tab shortcut URLs to Google's favicon service.

Lionel Messi Live Wallpaper sends each saved new-tab shortcut URL to Google's favicon service when rendering shortcuts.

ListenOnRepeat: Youtube to LOR ships a Google YouTube Data API key in its popup playlist request.

Live NBA Scores & Stats - GameDash sends page-view details from every website to Mixpanel.

Liver sends popup requests to Holodex with a bundled API key.

LlamaSearch sends displayed bookmark hostnames and top-site URLs to Google's favicon service.

LockPage installs a default page-lock password of 123 and uses it to unlock overlays on HTTPS pages.

Locker - Password Manager accepts sign-in tokens posted from pages and sends them to Locker's SSO endpoint.

LodestarALM Extension sends every HTTP and HTTPS page URL to its native messaging host.

Lofi Girl fetches remote audio ad feeds and simulates ad playback events from its background service worker.

Lucid loads Google Fonts from Google each time it replaces the new tab page.

LuckyCoin Wallet exposes the unlocked account address to every website through its injected provider.

Luffy Gear 5 Live Wallpaper sends saved new-tab shortcut URLs to Google's favicon service.

Luxxle sends hostnames from your browser's top-sites list to DuckDuckGo for favicon images.

MANISH loads Google Material Icons over plaintext HTTP when its extension UI pages open.

METAWALLET ships a hardcoded HMAC secret that signs requests to the Metacoin backend.

MONI exposes its extension ID, version, and URL inside Monday.com pages.

MPCVault lets any webpage set the extension's stored login token through its injected login bridge.