Low risk browser extensions

Tanjiro Kamado Kimetsu No Yaiba Gameograf loads vendor-controlled HTML into its new tab page.

Tanjiro Kamado Kimetsu No Yaiba Gameograf renders remote popup HTML inside its new-tab page.

Taobao Image Downloader accepts page messages that make it fetch any image URL and upload it to image-search sites.

Telegram downloader copies the user's premium license code into Telegram Web localStorage.

TermOver AI sends visited-site hostnames and terms-page text to its backend for AI analysis.

Testportal And Moodle Agent sends review-page answers and selected element screenshots to moodlea.com.

Text Shortcuts expands page-triggered shortcuts into saved snippets on every website.

Text to Speech - AI Voice Generator & TTS embeds Alibaba OSS credentials and uploads objects to oss-accelerate.aliyuncs.com.

The Batman Wallpaper New Tab sends top visited site URLs to Google's favicon service on the new-tab page.

The Education District forwards allowed page messages to a native host on the user's device.

The Lord of the Rings Live Wallpaper fetches remote HTML from Gameograf and renders it inside its new-tab page.

TikTok Unfollow Tool loads remote stylesheets from cdnjs and Google Fonts when its popup opens.

TikTok极光 sends seller account tokens and product data to a hardcoded backend IP over plain HTTP, not HTTPS.

TimeComments sends each YouTube video ID with your Chrome profile email or Google account ID to timecomments.com.

ToDiagram lets its editor pages retrieve selected text and page titles saved for diagram editing.

TokGPT - ChatGPT for TikTok lets any website send TikTok subtitles through your ChatGPT session.

Tokopedia Data Scraper - Product, Sales copies full page HTML from every HTTP or HTTPS site into its extension runtime.

Tokyo Ghoul Wallpaper sends most-visited site domains to Google when its new-tab page shows favicons.

Tophatter - Shopping Rewards sends visited page URLs and some product details to tophatter.com under remote config control.

Toyota Supra Neon Night Road Live Wallpaper sends configured shortcut destination URLs to Google's favicon service.

TradingView Strategy Optimizer sends signed account identifiers to Quant Trading Pro APIs using a bundled secret.

Translate Flashcards sends usage events and phrasebook metadata to Google Analytics.

Translate Spanish to English sends selected, clicked, or hovered page text to Google Translate for translation.

Trippy Circles sends new tab search queries with persistent extension identifiers to search.trippycircles.net.

True Colour Match by TCI lets any website trigger its billing-cancel page to reactivate a stored tab and reinject its content script.

Trufflepiggy - Quick Search removes CSP and X-Frame-Options headers from pages and embedded frames.

Tubelator sends YouTube pageview, URL, referrer, and transcript action telemetry to tai.tubelator.com.

Turbo Ad Finder 2.0 sends supported social and ad-library page URLs with persistent identifiers to an Aliyun logstore.

TurboType lets any web page trigger its message bridge to clear snippet state or start an authenticated snippet sync.

TweetPeek AI periodically sends the user's X handle, license email/key, and growth counters to backend.tweetpeek.ai.

Twitch Ads Blocker sends the Twitch channel you are watching to pxy.blocktwitchads.com for fallback playlists.

Twitter Extension stores the configured username filter list in Twitter page localStorage.

Typing Statistics | Auto Typer records per-site keypress statistics from every site in local extension storage.

The extension opens an adpvn.co affiliate popup when downloading images from Lazada product pages.

UPC Lookup sends the Chrome profile email to dropshipping-ext.parallelloop.io before explicit sign-in.

UW Madison - Course Search & Enroll + sends selected course identifiers to Madgrades with a bundled API token.

UW Wave lets uwwave.ca and any *.vercel.app page read and modify its extension storage.

UltraWide for YouTube polls MetricMuse for commands that collect Google, YouTube, and UNext profile data and viewing history.

Unblocked Games 76 ships hardcoded proxy credentials and returns them for authentication challenges on game and proxy domains.

UniTap Wallet exposes an unlocked account address to every website before connection approval.

Unicorn Wallpaper sends your Chrome top-sites URLs to Google's favicon service on each new tab.

VINCUE lets pages that open or frame KBB/MMR valuation pages request and receive vehicle valuation details.

VNConvert lets any website ask it to open vnconvert.com and fetch a supplied file URL for conversion.

Vagabond loads third-party font stylesheets each time its custom new-tab page opens.

Valentines Day Live Wallpaper sends each saved new-tab shortcut URL to Google's favicon service.

Viction Wallet embeds a Coin98 API signing secret and third-party RPC API keys in its background bundle.

Video Compressor & Filesize Reducer injects a hidden xeriflow.net iframe into every HTTPS page.

Video Speed Controller Global exposes its synced settings to page scripts on every site through a postMessage bridge.

Video filters for YouTube [QVI] uploads Google and YouTube activity and profile data to metricmuse.xyz.

Visual Bookmarks with All My Faves imports AllMyFaves tokens from tabs whose URLs contain allmyfaves.

VoIPstudio turns phone numbers on webpages into click-to-call links that page scripts can activate.

Vocab Wallet lets vocabwallet.com and localhost:4200 pages request its full local storage object.

Vodori Web Annotation lets matching child frames request credentialed background web fetches through the extension.

WA Biz Sender (Prime) sends your WhatsApp number and Chrome profile email to analytics and feedback services.

WASender sends WhatsApp Web page details and identifiers to Google Analytics.

WHMCS一键下单 sends detected WHMCS and Blesta checkout page URLs to rack.theinspiredgroup.com.

WMTWIN sends Walmart search terms, result-rank details, and product recommendation URLs to www.wmtwin.com.

Wachatbot removes key security and privacy headers from WhatsApp Web pages.

Walcu Pro sends coches.net vehicle listing details to Walcu pricing APIs and inserts Walcu promotional banners.

Wall of Marvel loads its new-tab background image over plaintext HTTP from CloudFront.