Low risk browser extensions

Nightmode Messenger loads fixed Imgur images from Messenger pages.

Nissan GT-R Live Wallpaper Haberikra sends saved new-tab shortcut URLs to Google's favicon service.

Nissan GT-R R35 Live Wallpaper fetches popup content from api.gameograf.com and injects it into its new-tab page.

Nissan Skyline GT-R R34 Live Wallpaper inserts remote HTML from api.gameograf.com into its new-tab page.

NoProx loads its popup styles from jsDelivr and Google Fonts when the extension UI opens.

Northstar Extension closes any tab whose URL ends with closeThisWindow.jsp.

Notificador Bravo lets any webpage spoof an incoming-call trigger for an open Bravo console.

Novofon 2.0 forwards remote page start_call messages to its embedded Novofon softphone iframe.

Nutshell CRM for Gmail sends Gmail and Nutshell account identifiers in TrackJS error telemetry.

OFES Form Autofill loads Google Fonts from its popup while its form-filling script runs on the FEU evaluation site.

ONE ZERO קאשבק lets any webpage ask the extension to open an attacker-chosen URL in a new tab.

OSINT Username Search sends your Chrome profile ID to livepolls.app and uploads searched names and tags to api.imgkits.com.

OasCopy keeps OAS pages marked visible and blocks blur/visibility events while copying question text to the clipboard.

Odex - Order Hàn Quốc reports each visited hostname to api.orderhanquoc.com for remote site configuration.

OndaLink lets any website frame its chat page and send your active tab URL to its backend.

OpenBlock Bridge forwards page origins and full URLs to the OpenBlock wallet page during provider setup.

Orchid eBound - NICS Integration stores 4473 form details from any /portal page and copies them into CJIS NICS forms.

Otio sends visited page URLs to its API to check whether they are already in your library.

Outbrain Direct Response - Pixel Compliance Checker checks pages for Outbrain pixel status and displays results in its UI.

Overlord Wallpaper sends top-site URLs from the new-tab page to Google's favicon service.

PAA Scrapper injects a vendor logo image on Google pages, causing the browser to request it from the-business-legion.com.

PDF Splitter opens its PDF splitting page over cleartext HTTP when installed or clicked.

PDF to TIFF Converter opens its online converter page over cleartext HTTP when installed or clicked.

PDF to Word sends uploaded PDFs to PDFRest and posts a stored visitor identifier to its backend during conversion.

PNG to PDF Converter opens its converter page over plaintext HTTP when installed or clicked.

POKY WooCommerce - Product Importer can send matched product-page URLs and page HTML to woo.poky.app.

PSXRewards renders reward data from live.andypsx.com inside Kick pages without escaping some fields.

PYER: 엔트리 테마 injects third-party image and font resources into playentry.org workspace pages.

Paced Email lets any website trigger a logout message that removes its saved account and token.

Pacifist Web Extension lets any website send chosen archive URLs to its Pacifist native host.

PageSpeed Insights sends the current page URL to Google's PageSpeed Insights API when you open its sidebar.

PageSpeed Saver stores saved PageSpeed report URLs, scores, and Lighthouse JSON in pagespeed.web.dev IndexedDB.

Painless CC lets a localhost page retrieve saved YouTube subtitle contribution drafts after the user starts sharing them.

Panda Dome Password Manager lets opted-in webpages add password entries to the logged-in vault.

Pandro sends your Instagram account identity and periodic automation activity reports to instech.tech.

Paperflite Extension for Chrome adds Gmail tracking pixels and link redirects and sends sent-message metadata to Paperflite.

Paraphrase Tool sends selected page or form text with a persistent user ID to its AI backend after user actions.

Paris MeaVana strips CSP and frame-protection headers and can send sidebar translation text to Google Translate.

Password Protect PDF opens its PDF-protection workflow over cleartext HTTP on install and when clicked.

Peach and Goma Live Wallpapers loads remote popup HTML into its new-tab page.

Peacock TV Extended sends Peacock viewing events, profile data, and account email to me3x.online and metricsmint.quest.

PeakAI sends a persistent extension device ID and IP-derived country telemetry to Amplitude when its popup opens.

People Also Ask fetches remote ad configuration when it is installed or used on Google Search.

Perseo records HTTP(S) page navigation URLs and request and response headers in local extension storage.

Petapator automatically sends patent and PubMed search result content to its chat backend.

Phaser Debugger exposes its extension runtime URL to page scripts through a temporary DOM attribute on every site.

Photo to Text sends selected images and screenshots to ethereal-expanse.com with a persistent per-install user ID.

Pic to Text lets any website ask its OCR frame to read a supplied image URL and return the extracted text.

Picture in Picture works with Paramount [QVI] sends Paramount profile, account, subscription, and watch data to remote servers.

Piez adds Akamai diagnostic headers to requests sent to websites you visit.

Pinky Cursor adds an extension-ID-derived CSS class to every matched page.

Pitch Shifter adds permissive CORS headers to media responses while the extension is installed.

Plex Download Extension can generate Plex download URLs with a page-stored access token after loose Plex URL matching.

Podcast Hero loads remote Google Analytics JavaScript on its custom new-tab search page.

Pointofmail.com Email Tracking & Recall registers your Gmail address and timezone with Pointofmail when Gmail loads.

Pokemon Family Live Wallpaper fetches popup HTML from Gameograf and inserts it into its new-tab page.

Porn Blocker & Adult Content Filter - PurityGuard embeds premium license keys and validates upgrades inside the extension.

Potion Screen Recorder lets almost any website trigger its screen-recording workflow and sends recording chunks to app.sendpotion.com.

PriceDaddy! sends realestate.com.au listing image URLs to corsproxy.io to check when a property image was last updated.

Prime Video Subtitles Translator lets webpages ask the extension to fetch arbitrary subtitle URLs.