Low risk browser extensions

Matrix Start Tabs sends failed navigation hostnames to matrixstarttabs.com.

Max Verstappen Red Bull F1 Champion Maserati Live Wallpaper inserts Gameograf popup HTML into its new-tab page.

MayiFree-開水小助手 redirects a game script to remote code hosted on fish.mayifree.com.

Medium for All deletes cookies for Medium requests, including cookies from the page that initiated the request.

MemoTab sends daily counts of notes, boards, shortcuts, iframes, checklists, and focus sessions to api.memotab.space.

Mesh lets any site trigger its web-accessible iframe to identify the signed-in account to Segment.

Messi Live Wallpaper sends new-tab shortcut domains to Google to load favicon images.

Messi Wallpapers sends custom new-tab shortcut URLs to Google's favicon service.

MetaPush sends session and error telemetry from scoped NFT site pages to sentry.fuxi.netease.com.

MiFone MITEK sends call metadata and local WebRTC IP details to a hardcoded n8n-dev.mitek.vn webhook during poor call quality.

Michael Jordan MeaVana removes Content-Security-Policy and frame-protection headers through dynamic network rules.

Microsoft Audio-Content-Creation TTS Exporter enables Amplitude tracking on Microsoft audio content creation pages.

Milleis Digital - Custom CSS injects remote background images into Milleis and BQE banking pages.

MindTree exposes its extension ID in page-visible resource URLs on ChatGPT.

Mine Finder sends popup usage events to Google Analytics with a persistent extension client ID.

Minecraft Live Wallpapers New Tab loads Gameograf-controlled shortcuts and popup HTML on its new tab page.

Minecraft Sakura Pond Live Wallpaper sends shortcut URLs to Google when it loads favicons on the new-tab page.

Minelead reads active-tab page text to find email addresses and sends them to api.minelead.io for validation.

Mobicip adds its filter token and version headers to every HTTP and HTTPS request it matches.

MoneyNex exposes the current wallet address to any website through its injected page API.

Monkey D. Luffy Live Wallpaper New version sends shortcut URLs to Google's favicon service on each new-tab render.

Move Tab sends pinned-site hostnames from the new-tab page to its analytics API with a persistent client ID.

MoveOn Shopping Assistant sends product and page details from merchant sites to MoveOn's inventory API.

Mpurse lets HTTPS pages invoke selected mpchain.info JSON-RPC proxy calls through its content-script bridge.

Multi Search & Multi AI sends typed new-tab search queries to Google autocomplete before submission.

Multi-RTL sends the signed-in Chrome profile email and customer ID to PayVia when checking licenses.

Music and Audio Catcher watches web requests on all sites to find playable media and saves media URLs locally.

My CV Creator loads Google Fonts and MaxCDN stylesheets when the popup opens.

My Cursors marks every HTTP and HTTPS page with a style class derived from its extension ID.

My Dress-Up Darling Wallpaper sends top visited page URLs to Google's favicon service on the new-tab page.

My Little Pony Wallpaper sends top-site URLs to Google's favicon service on the new-tab page.

My Melody Anime Live Wallpaper loads Google Fonts from its new-tab page whenever the extension's tab opens.

My Melody Cursor adds a stable extension-ID class to every page where its cursor script runs.

My Most Trusted Network looks up your IP geolocation through ip-api.com over unencrypted HTTP.

My Safe Search exposes its Chrome extension ID to pages on mysafesearch.co.

My Weather sends your IP-based location to weather services when opening its new-tab page.

MyAi injects remote image assets from amaru-ecosystemfoundation.org into every visited page.

MyPicture works with Disney+ custom picture [QVI] sends Disney account/profile details and viewing activity to its servers.

MySudo Browser Extension offers autofill for MySudo identity and payment details on HTTPS pages.

NBA Daily ships a hardcoded API-Sports key and reuses it for NBA data requests.

Namecoach includes a recoverable service token used to authorize GPDB API requests.

Naruto Live Wallpaper fetches remote notification HTML and displays it inside its new tab page.

Naruto Live Wallpaper New Tab fetches remote notification HTML and inserts it into its new-tab page.

NavigateMe sends Google search terms to Croner's AWS search API and inserts returned result HTML into Google results pages.

Neon BMW Live Wallpaper New Tab loads remote Gameograf popup, shortcut, and news content into each new-tab page.

Neon work clock sends top-site hostnames from the new-tab page to favicongrabber.com for favicon lookup.

NetSuite Script Deployments loads Font Awesome from cdnjs.cloudflare.com when its popup opens.

NeuroText lets any webpage toggle extension features and reports those feature updates to getneurotext.com.

Nicolas Cage images replaces page images with a third-party image hosted on i.guim.co.uk.

Nifty stores its extension UI state in each visited site's localStorage.

Night Search sends each Chrome top-site URL to nightsearch.org when opening its new-tab page.

Nightmode Messenger loads fixed Imgur images from Messenger pages.

Nissan GT-R Live Wallpaper Haberikra sends saved new-tab shortcut URLs to Google's favicon service.

Nissan GT-R R35 Live Wallpaper fetches popup content from api.gameograf.com and injects it into its new-tab page.

Nissan Skyline GT-R R34 Live Wallpaper inserts remote HTML from api.gameograf.com into its new-tab page.

NoProx loads its popup styles from jsDelivr and Google Fonts when the extension UI opens.

Northstar Extension closes any tab whose URL ends with closeThisWindow.jsp.

Notificador Bravo lets any webpage spoof an incoming-call trigger for an open Bravo console.

Novofon 2.0 forwards remote page start_call messages to its embedded Novofon softphone iframe.

Nutshell CRM for Gmail sends Gmail and Nutshell account identifiers in TrackJS error telemetry.