Low risk browser extensions

thegivingmachine sends matched shopping-site visits to Google Analytics.

tjekpånettet.dk sends each visited site's host to ScamAdviser for reputation scoring.

vtexSnitch inventories marketing and VTEX request URLs and pixel IDs on every website you visit.

xBull Wallet lets webpages request wallet connection and public-key access through its injected browser bridge.

zipBoard removes CSP and X-Frame-Options protections from every top-level and embedded page it can match.

zkID Wallet lets web pages query whether the wallet is locked.

The extension routes ChatGPT-related sites through hardcoded or remotely configured proxy servers.

Молния VPN includes its premium-token signing key in the extension, allowing local PRO entitlement tokens to be generated.

Поиск по фото на Wildberries sends page URLs, titles, and referrers from all sites to Google Analytics.

Я.Кликер sends selected or current-page URLs to lnk.name for link shortening.

云神价-购物点点 reads Weibo account IDs from open tabs and sends them to www.yunshenjia.com.

免费在线视频下载器Plus removes Facebook X-Frame-Options headers from every facebook.com response.

月亮树MoonTree极速调价插件 stores saved MoonStatistics credentials and user tokens with a hardcoded in-bundle password.

特卖选品 - TemuFilter lets Temu pages request its Chrome extension ID through an injected page bridge.

虾秘- Shopee虾皮达人邀约工具 lets Shopee seller pages fetch arbitrary URLs through its background worker.

行云-plugin loads JD employee profile and ticket workflow data over cleartext HTTP.

视频速度控制器 video speed controller conditionally routes Chrome update checks through agency.pictureknow.com.

讀 Extension lets any webpage ask the extension to read selected or page text aloud through Chrome text-to-speech.

超强AliExpress速卖通类目查询 inserts remote HTML from rangtaobaofei.com into AliExpress item pages.

超强科技TM自动抢库助手 reads a Temu seller mallid request header and sends it to da.rangtaobaofei.com.

速蜂工具箱-Tiktok-商品机会词，清理无流量 sends page URLs and referrers from TikTok, TikTok Shop, and Baidu pages to Aliyun RUM.

이세돌 뱅온 예약기 sends the user's heart-points totals and optional nickname to Firebase every hour.

Dingocoin Wallet exposes the user's active wallet address to any HTTPS website with no confirmation prompt.

Twitter download helper checks api.pictureknow.com for updates and can route Google update-host traffic through a vendor proxy.

크림헬퍼SIBNA sends Kream product page URLs and product titles to 18nike.com.

IDL Helper sends a credentialed request to instaloader.net on every page at first run to fetch an attribution value.

Automatic Messenger Translator sends Facebook Messenger message text over plain HTTP when using its DeepL or GPT translation options.

ViaTrumf Bonusvarsler uses a CloudFront feed to decide where it injects bonus notification markup.

GaiaUpgrade sends avatar image URLs to cors-fix.web.app when exporting saved avatar images.

YouTube Downloader strips X-Frame-Options and Content-Security-Policy headers from every page you load in Firefox.

Taobao Tmall Data Scraper captures and attempts to send the full HTML of every website you visit, not just Taobao or Tmall.

GitHub Accelerator routes GitHub downloads through third-party proxy nodes whose 'integrity check' never verifies the downloaded file.

Red Lamborghini Live Wallpaper New Tab renders new-tab content fetched from api.gameograf.com.

The extension rewrites Taobao, Tmall, 1688 and Pinduoduo product links on every page to URLs returned by cashback.gobiz.dev.

CIVR Connector accepts postMessage from any web page and uses it to auto-fill and submit DICOM viewer login credentials.

Coles Trend sends viewed Coles product metadata and store selection data to its API.

GFC Invoice intercepts clicks on 17 shopping sites and reroutes the purchase through its own affiliate link before it loads.

Etsy Price Tracker reports matching Etsy URLs to Aliprice and can rewrite Etsy links through Aliprice redirects.

DeepDyve Plugin sends saved research search URLs and article-view metadata to DeepDyve by default.

Star Match Game sends popup page-view telemetry with a persistent client ID to Google Analytics.

Multi Login - NapXu.Vn saves TikTok session cookies in plaintext local storage and can export them to an unencrypted file.

Stanford GSB Library Chrome Extension sends a persistent extension user ID and popup activity to Google Analytics.

DS-Backend Web Player removes Content-Security-Policy and X-Frame-Options headers from every http(s) page in all tabs.

VisaJar screenshots your logged-in US visa portal page and uploads it with your appointment details to its servers.

Telfon loads a Microsoft Clarity session recorder in its own softphone pages, uploading interaction recordings to Clarity.

Automatic message translation sends Pro-tier DeepL and AI translation requests over plain HTTP, including message text and the user's session token.

Sidebar for YouTube removes YouTube frame-blocking headers from subframe responses across browsing contexts.

MoiTuristy Helper auto-fills tour-operator site logins from the MoiTuristy CRM into the pages you visit.

Assistant for Instagram adds tools to instagram.com and its page message handler checks the sender origin with a substring match.

Automatic LINE APP Translator sends LINE chat text over plain HTTP to translate-api.ext-api.com when the Pro DeepL engine is selected.

Extended works with Paramount Plus reports your account email and viewing activity to servers unrelated to Paramount every 5 minutes.

High or Low Casino Game fetches HTML from its own server at the start of each round and inserts it into the game page.

Pomodoro Technique Timer periodically sends a persistent generated device ID to its license server.

FlashVPN routes browser traffic through vendor proxy servers and supplies proxy credentials to any HTTP auth challenge.

FBA Calculator for Amazon FBA Sellers accepts a login API key from any postMessage sender on Amazon pages, with no origin check.

OCR sends captured screen regions to OCR.space for text recognition and opens a JD Cloud affiliate page from its result link.

Sora Video Downloader loads a cdnjs Font Awesome stylesheet on OpenAI and Sora pages.

Yandex search by image sends the URL, title, and referrer of every page you visit to Google Analytics with a persistent per-install ID.

AliHunter Plus redirects AliExpress product, shop and cart page loads through an affiliate link carrying the vendor's key.

ETA E-Invoicing Tool - Mohasib Friend sends receipt share URLs to quickchart.io to generate QR codes.