Low risk browser extensions

Mafuyu PJSK Live Wallpaper sends user-added shortcut URLs to Google's favicon service when rendering its new tab page.

Magnetar sends detected torrent hashes to the configured debrid provider for cache checks.

Making Today loads Google Fonts from its new-tab page, sending each new-tab request to fonts.googleapis.com.

Manchester City Wallpapers fetches remote popup HTML and displays it on the extension's new tab page.

MangaToon For PC Windows 10 sends top-site URLs to Google when showing favicons on its new-tab page.

Map Route Pro embeds an Azure Maps key and sends map search requests to atlas.microsoft.com.

MarketDB - Аналитика Магнит Маркета stores report UUIDs in mm.ru localStorage and sends them to MarketDB report APIs.

Marketplace Listings Reposter can send masked Facebook page activity recordings to Sentry.

Marvel Rivals Live Wallpaper sends user-added shortcut URLs to Google's favicon service.

Matrix Start Tabs sends failed navigation hostnames to matrixstarttabs.com.

Max Verstappen Red Bull F1 Champion Maserati Live Wallpaper inserts Gameograf popup HTML into its new-tab page.

MayiFree-開水小助手 redirects a game script to remote code hosted on fish.mayifree.com.

Medium for All deletes cookies for Medium requests, including cookies from the page that initiated the request.

MemoTab sends daily counts of notes, boards, shortcuts, iframes, checklists, and focus sessions to api.memotab.space.

Mesh lets any site trigger its web-accessible iframe to identify the signed-in account to Segment.

Messi Live Wallpaper sends new-tab shortcut domains to Google to load favicon images.

Messi Wallpapers sends custom new-tab shortcut URLs to Google's favicon service.

MetaPush sends session and error telemetry from scoped NFT site pages to sentry.fuxi.netease.com.

MiFone MITEK sends call metadata and local WebRTC IP details to a hardcoded n8n-dev.mitek.vn webhook during poor call quality.

Michael Jordan MeaVana removes Content-Security-Policy and frame-protection headers through dynamic network rules.

Microsoft Audio-Content-Creation TTS Exporter enables Amplitude tracking on Microsoft audio content creation pages.

Milleis Digital - Custom CSS injects remote background images into Milleis and BQE banking pages.

MindTree exposes its extension ID in page-visible resource URLs on ChatGPT.

Mine Finder sends popup usage events to Google Analytics with a persistent extension client ID.

Minecraft Live Wallpapers New Tab loads Gameograf-controlled shortcuts and popup HTML on its new tab page.

Minecraft Sakura Pond Live Wallpaper sends shortcut URLs to Google when it loads favicons on the new-tab page.

Minelead reads active-tab page text to find email addresses and sends them to api.minelead.io for validation.

Mobicip adds its filter token and version headers to every HTTP and HTTPS request it matches.

MoneyNex exposes the current wallet address to any website through its injected page API.

Monkey D. Luffy Live Wallpaper New version sends shortcut URLs to Google's favicon service on each new-tab render.

Move Tab sends pinned-site hostnames from the new-tab page to its analytics API with a persistent client ID.

MoveOn Shopping Assistant sends product and page details from merchant sites to MoveOn's inventory API.

Mpurse lets HTTPS pages invoke selected mpchain.info JSON-RPC proxy calls through its content-script bridge.

Multi Search & Multi AI sends typed new-tab search queries to Google autocomplete before submission.

Multi-RTL sends the signed-in Chrome profile email and customer ID to PayVia when checking licenses.

Music and Audio Catcher watches web requests on all sites to find playable media and saves media URLs locally.

My CV Creator loads Google Fonts and MaxCDN stylesheets when the popup opens.

My Cursors marks every HTTP and HTTPS page with a style class derived from its extension ID.

My Dress-Up Darling Wallpaper sends top visited page URLs to Google's favicon service on the new-tab page.

My Little Pony Wallpaper sends top-site URLs to Google's favicon service on the new-tab page.

My Melody Anime Live Wallpaper loads Google Fonts from its new-tab page whenever the extension's tab opens.

My Melody Cursor adds a stable extension-ID class to every page where its cursor script runs.

My Most Trusted Network looks up your IP geolocation through ip-api.com over unencrypted HTTP.

My Safe Search exposes its Chrome extension ID to pages on mysafesearch.co.

My Weather sends your IP-based location to weather services when opening its new-tab page.

MyAi injects remote image assets from amaru-ecosystemfoundation.org into every visited page.

MyPicture works with Disney+ custom picture [QVI] sends Disney account/profile details and viewing activity to its servers.

MySudo Browser Extension offers autofill for MySudo identity and payment details on HTTPS pages.

NBA Daily ships a hardcoded API-Sports key and reuses it for NBA data requests.

Namecoach includes a recoverable service token used to authorize GPDB API requests.

Naruto Live Wallpaper fetches remote notification HTML and displays it inside its new tab page.

Naruto Live Wallpaper New Tab fetches remote notification HTML and inserts it into its new-tab page.

NavigateMe sends Google search terms to Croner's AWS search API and inserts returned result HTML into Google results pages.

Neon BMW Live Wallpaper New Tab loads remote Gameograf popup, shortcut, and news content into each new-tab page.

Neon work clock sends top-site hostnames from the new-tab page to favicongrabber.com for favicon lookup.

NetSuite Script Deployments loads Font Awesome from cdnjs.cloudflare.com when its popup opens.

NeuroText lets any webpage toggle extension features and reports those feature updates to getneurotext.com.

Nicolas Cage images replaces page images with a third-party image hosted on i.guim.co.uk.

Nifty stores its extension UI state in each visited site's localStorage.

Night Search sends each Chrome top-site URL to nightsearch.org when opening its new-tab page.