Low risk browser extensions

JOSEPHA sends the current page URL and location/account metadata to Firebase and PostHog during price searches.

JSON Tools sends popup page views, button clicks, and persistent client/session IDs to Google Analytics.

JSONGrid Web Inspector sends usage events with a persistent client identifier to Google Analytics.

JUAN marks crypto cashtags on X pages and exposes matching saved portfolio details in page DOM tooltips.

JW Web Add-on imports Google Fonts in its popup, sending a font request to Google when the control panel opens.

Japanese Spring Live Wallpaper sends user-added shortcut URLs to Google to load favicon images.

Jinu - KPop Demon Hunters Live Wallpaper sends each new-tab shortcut URL to Google's favicon service.

JobFillr shows a success message that loads a Buy Me A Coffee image from cdn.buymeacoffee.com.

JobGlance sends visited job-posting details and a persistent extension UUID to its Supabase backend.

Jokes and Smiles - New Tab sends new-tab telemetry to Google Analytics and requests country data from ipapi.co.

JoyaGoo Warn Reminder Remover rewrites product-page referral parameters on scoped shopping sites.

K-Pop Demon Hunters: Starry Night Live Wallpaper sends shortcut URLs to Google for favicon images.

Kameleoon Graphical Editor lets pages trigger browser header changes that remove frame protections and spoof User-Agent.

Kansas City Chiefs Wallpaper sends your Chrome top-sites URLs to Google's favicon service on the new-tab page.

Kastle treats wallet requests from embedded frames as if they came from the connected parent site.

King Von Live Wallpaper sends saved new-tab shortcut URLs to Google's favicon service.

Koenigsegg Jesko Live Wallpaper sends saved shortcut URLs to Google's favicon service.

Komentaire Extension sends Amazon product IDs and page URLs to its Komentaire CDN endpoint.

Kuponer.cz lets any website trigger hidden background tabs to URLs supplied through its content-script message relay.

LBS数据采集 sends each visited hostname to scrm.maoxiaoqi.com and uploads scraped Maps business listings.

Lamborghini Aventador Live Wallpaper New Tab loads remote popup HTML into its new-tab page.

Lamborghini Live Wallpaper inserts remote HTML from Gameograf into its new tab popup.

Lamborghini Revuelto Live Wallpaper loads remote popup HTML from api.gameograf.com into its new-tab page.

Laya Tree lets page scripts send inspector commands that read and modify Laya game objects.

Lazuli inserts remote teacher-score feed values into ZJU course-selection pages as HTML without escaping.

Legal Forms and Agreements opens selected legal-document links on LawDepot over cleartext HTTP.

Leganto Cite it! Bookmarking Tool lets any website ask the extension to reload an open tab.

Lets Kick It! loads a BetterTTV sound asset when matching Kick chat keywords appear.

Letterboxd Streaming Providers bundles a decodable TMDB API bearer token and sends it to api.themoviedb.org.

Librezam can send recorded audio samples to ACRCloud when its default recognition credentials are enabled.

LightningProxies Extension supplies stored proxy credentials to every HTTP authentication challenge.

Limbic for Therapists can send delimited page text from later sites to Limbic Atlas after retaining stale EHR context.

Lingo Champion sends selected words and matching visible page sentences to lingochampion.com for translation.

Lionel Messi Live Wallpaper sends saved new-tab shortcut URLs to Google's favicon service.

Lionel Messi Live Wallpaper sends each saved new-tab shortcut URL to Google's favicon service when rendering shortcuts.

ListenOnRepeat: Youtube to LOR ships a Google YouTube Data API key in its popup playlist request.

Live NBA Scores & Stats - GameDash sends page-view details from every website to Mixpanel.

Liver sends popup requests to Holodex with a bundled API key.

LlamaSearch sends displayed bookmark hostnames and top-site URLs to Google's favicon service.

LockPage installs a default page-lock password of 123 and uses it to unlock overlays on HTTPS pages.

Locker - Password Manager accepts sign-in tokens posted from pages and sends them to Locker's SSO endpoint.

LodestarALM Extension sends every HTTP and HTTPS page URL to its native messaging host.

Lofi Girl fetches remote audio ad feeds and simulates ad playback events from its background service worker.

Lucid loads Google Fonts from Google each time it replaces the new tab page.

LuckyCoin Wallet exposes the unlocked account address to every website through its injected provider.

Luffy Gear 5 Live Wallpaper sends saved new-tab shortcut URLs to Google's favicon service.

Luxxle sends hostnames from your browser's top-sites list to DuckDuckGo for favicon images.

MANISH loads Google Material Icons over plaintext HTTP when its extension UI pages open.

METAWALLET ships a hardcoded HMAC secret that signs requests to the Metacoin backend.

MONI exposes its extension ID, version, and URL inside Monday.com pages.

MPCVault lets any webpage set the extension's stored login token through its injected login bridge.

Mafuyu PJSK Live Wallpaper sends user-added shortcut URLs to Google's favicon service when rendering its new tab page.

Magnetar sends detected torrent hashes to the configured debrid provider for cache checks.

Making Today loads Google Fonts from its new-tab page, sending each new-tab request to fonts.googleapis.com.

Manchester City Wallpapers fetches remote popup HTML and displays it on the extension's new tab page.

MangaToon For PC Windows 10 sends top-site URLs to Google when showing favicons on its new-tab page.

Map Route Pro embeds an Azure Maps key and sends map search requests to atlas.microsoft.com.

MarketDB - Аналитика Магнит Маркета stores report UUIDs in mm.ru localStorage and sends them to MarketDB report APIs.

Marketplace Listings Reposter can send masked Facebook page activity recordings to Sentry.

Marvel Rivals Live Wallpaper sends user-added shortcut URLs to Google's favicon service.