Low risk browser extensions

SiteBlocker sends blocked-site domains to PostHog when its rules match a page.

Sitecore Author Toolbox sends hashed Sitecore user email addresses to Gravatar on Experience Profile pages.

Sitecore Extensions lets any website read and change its extension storage through an all-page message bridge.

Skin|Chess.com has no confirmed data-recipient behavior in the reviewed records.

SkyMetric runs a Parcel hot-reload listener that accepts JavaScript updates from localhost on Kaspi product pages.

Slither IO Unblocked Game New Tab inserts game listings fetched from kavgamiz.com into its new-tab page.

Smart SEO sends the active tab's hostname with a persistent extension-generated user ID to Semalt.

SmartCustomer sends search result domains and its Sitejabber session cookie to Sitejabber's API.

Smartcare lets any webpage ask the extension to open an arbitrary URL in an incognito window.

SocialBook - YouTube Builder lets embedding pages request a canvas capture of the current YouTube video frame.

Socket Security sends package identifiers it finds in page links and code blocks to api.socket.dev.

Solana Rug Checker registers a browser device fingerprint with wiksi.org and sends token-search fingerprints from its popup.

SoldScope exposes a background fetch handler to any other installed extension, which can retrieve arbitrary URLs' HTML through it.

Sorare NBA Jet sends remote-config-selected active-tab URLs to www.sorarenbajet.com for analysis.

Sound Up - Volume Booster 2023 requests a Google Fonts stylesheet when its popup opens.

SoundCloud Dark loads fixed Imgur images into SoundCloud pages through its injected stylesheet.

Space Spiders sends displayed bookmark URLs to Google and submits searches to search.spacespiders.net with stored identifiers.

Space Tab sends IP-derived location coordinates to its weather API when the new-tab page loads.

SpeechToText injects a hidden coindropster.com iframe on many popular websites.

SpeedMaster Pro lets any page message its frame script to modify timing APIs inside embedded cross-origin frames.

SplitPilot removes Content-Security-Policy and frame-blocking headers from all HTTP(S) responses.

Spotify Side Lyrics reads Spotify's lyrics page and mirrors the current lyric line in its side panel.

Spotube exposes its OAuth callback so websites can close the active tab and replace the stored Spotify token.

Squarestylist Selector Helper lets HTTPS pages trigger extension clipboard writes through an unchecked message handler.

Squid Game Cursor injects CSS cursor URLs containing its extension ID into pages after a cursor is enabled.

Stamp Wallet logs wallet recovery phrase material to the extension console during seed reveal.

Start Page - Date and Time sends weather lookup requests to OpenWeather from its weather widget.

Stash lets webpages trigger configured shortcuts that bookmark and close tabs.

Stay Focused sends configured website domains to Google's favicon service when showing site icons.

StealthHound lets webpages trigger spoofed fingerprint alerts through its page event bridge.

Stephen Curry Wallpaper sends most-visited site URLs from its new-tab page to Google's favicon endpoint.

Sticky Notes stores editable note HTML from pages and can replay a global note across every site.

Stocksi Ultimate sends scoped error telemetry with page URLs and device/network details to websocket.priority.news.

Strava Heatmap attaches your Strava cookies to global heatmap tile requests and makes the responses readable by other sites.

Straw Hat Live Wallpaper sends each saved shortcut URL to Google's favicon service when opening a new tab.

StreamPod exposes Twitter OAuth callback pages that exchange supplied codes and send Twitter tokens to StreamHQ services.

StudyPal AI sends submitted questions to OpenAI using a bearer API key bundled in the popup.

Subtitle Masker injects an on-page overlay whose element IDs include the extension runtime ID.

SuitePrint sends SuiteFiles usernames and passwords in the login request URL.

Suno Explorer submits aggregate Suno library metrics to a Supabase endpoint after indexing and on a daily alarm.

Super Cloner can replay source funnel metadata from any HTTP(S) page into GoHighLevel clone APIs.

Super Focus Tabs captures active-tab screenshots on all URLs and stores them locally for tab previews.

Super GSC sends signed-in email addresses and Search Console keyword queries to api.supergsc.com.

Super Kulasis sends Kyoto University course and professor names from KULASIS pages to tatekan.copynight.net.

Super PDF Split Merge lets any embedding website trigger downloads through its web-accessible option page.

SuperDrag turns page drag gestures into browser tab opens for links, images, and selected text.

Swipe Offers Spy exposes stored account details and authenticated transcription requests to Facebook Ads Library page scripts.

System Info opens a Chrome Web Store promotion tab for another extension after updates.

TTok Automation sends your TikTok uniqueId and auto-comment settings to Alibaba Cloud SLS telemetry.

TUAT Autofill Extension adds a Buy Me a Coffee image to TUAT login pages, causing a request to buymeacoffee.com.

TUF Enhancer inserts GitHub-hosted problem links into inline click handlers without escaping.

Tab Equalizer loads a Google Fonts stylesheet when its equalizer page opens.

Tab Groups to Bookmarks loads its popup icon stylesheet from cdnjs.cloudflare.com when you open the popup.

Tab Lasso loads Google Fonts from its new tab page, sending request metadata to Google font domains.

Tab Lock - Secure Any Website Easily lets webpages remove its lock overlay by posting a WXT content-script marker.

Tab Redesign stores login and payment identity from matching browser tab URLs without verifying the callback origin.

Tab for Google Tasks loads a Wikimedia-hosted image whenever its Google Tasks page script runs.

TabBoost removes iframe and content-security headers from pages and subframes by default.

TabXpert sends tab favicon URLs to i.tabxpert.com when non-paid users view the new tab page.

Tagmate Tracker sends Google Search query terms with a persistent extension client ID to Google Analytics.