Low risk browser extensions

Discord Token Login logs Discord in from a token in a plain URL, accepted from any navigation, not only its own popup.

Savelore accepts dashboard-supplied sync tokens and uses them to upload saved snippets to Supabase.

VPN for Notion fetches its proxy server credentials from unauthenticated GitHub, Blogspot, and Google Docs pages with no integrity check.

Full Page Screenshot broadcasts a stable extension identifier to every web page it runs on.

Perfect Sender sends your license key and device identifiers to its server over plain HTTP instead of HTTPS.

Ice Spice Wallpapers renders remote JSON content directly into the new tab page's DOM with no sanitization.

Favorites Start Page fetches bookmark and top-site pages to discover favicons for its new-tab page.

DBIRD Dual Subtitles accepts a login token from any web page via its welcome.html page and saves it as the active account.

AI Assistant for ChatGPT sends your IP address and a persistent device ID to an analytics endpoint on install and update.

FreeexpressVPN Chrome has no VPN/proxy function and sends the active tab's URL to a third-party geolocation API on every popup open.

SmartPrice Guard rewrites every Amazon product URL and link with its own affiliate tag from a remote server, undisclosed.

Skip Wait lets pages trigger credentialed extension fetches to page-chosen URLs.

Vinted Scraper - One-Click Data Export broadcasts every API response on Vinted pages to any script sharing the page via postMessage.

The New York Times News sources every headline, image, and click-through link from a third-party server, notifiernews.com, not NYT.

X Token Login writes a pasted x.com auth_token value directly into the browser's cookies to log in as that account.

YouTube Shorts Remover reads the user's Google activity history and profile data, then sends it to a third-party server.

eCaresConnect injects a content script into every page you visit and opens new windows to URLs built from data read off the page.

VPN Core sends your public IP address and Google account email and name to rgbcore.ru to authorize proxy access.

Labubu Cursor accepts postMessage commands from any web page and fetches attacker-supplied URLs with the user's credentials.

Streaming Skipper reports your Paramount+ account activity to a third-party server and sends your email address to a second one.

Discord Token Login sends the Discord token you type into it to discord.com as a plain, unencoded URL parameter.

Polyhelper sends Polymarket page details and wallet identifiers to its analytics server.

Notifier for BBC News renders its remote feed into the popup with unescaped HTML, exposing it to markup injection and forced navigation.

BBC Sport renders remote feed content in its popup via unescaped HTML and reports a persistent device ID to its feed server.

Citrix Secure Access (Canary) periodically sends browsing history and device/user telemetry to a Citrix-controlled endpoint.

Click to component listens for window messages with no origin check, letting any page script redirect its next clicked-source URL.

Zevr Guard fetches your public IP from the third-party service api.ipify.org when the side-panel globe is opened.

GH Copilot Master sends your account email and session token to its backend over unencrypted HTTP.

e-signer injects a digital signing and certificate API into local file:// pages and forwards requests to a locally installed native module.

Automatic badoo translator sends chat message text to its own translation backend over plain HTTP instead of HTTPS.

Email Tracker + Tracking Pixel Blocker strips security headers on Outlook and IP-lookup pages for any visitor, not only its own users.

Sentience runs its wallet's plugin sandbox inside its own marketing website instead of MetaMask's isolated execution page.

ZipRecruiter Coupon Finder reports the domain of every website you switch to, not just ZipRecruiter, to cashbackeasy.com.

My Weather Tab sends IP-derived location data to weather services from its new-tab page.

CPR Enroll Agency Connect runs server-supplied automation steps on certification tabs, some via OS-level synthesized clicks.

Ali Agent rewrites AliExpress links on every website you visit to route through its own affiliate link.

CG Entry Master sends the user's email, access token, and IP address to its server in cleartext HTTP, embedded in the request URL.

Evisa Extensions hardcodes a full payment card and auto-fills it into Vietcombank's nganluong.vn payment form.

Class Timer sends the active tab's hostname and your typed timer title to its own server whenever you start a timer.

Ali Seller Toolkit rewrites every AliExpress link on every website you visit to earn its own affiliate commission.

InovaDesk's web.whatsapp.com script accepts window messages with no origin check, letting scripts read or replace its stored session token.

Fish Radar sends your location to fishing-report.ru and inserts the server's response into the popup without sanitizing it.

Multi View for Paramount+ strips X-Frame-Options and Content-Security-Policy from every paramountplus.com page, not just its own frames.

Pawaka PDF redirects every PDF tab you open to its own server, sending the full original URL along.

InsumerPass lets any webpage forge a fake wallet connection because its content-script message channel ID is exposed before use.

Session Collector encrypts your saved tab sessions with a key anyone can derive from your email address alone.

VeriSentra accepts login credentials from any local web server on port 3000 or 3002, not just its own site.

ZapQR relays your password through its own relay.zapqr.ai server as base64 text with no encryption of its own.

Beautiful Roses replaces the New Tab page with a NYTimes Technology RSS feed rendered via unescaped innerHTML.

Deer's new-tab page routes its Amazon shortcut icon through the vendor's own domain instead of amazon.com.

FortiEDR Secure Browser captures the plaintext username and password from every form submitted on every website.

Getaway Simplified falls back to an unauthenticated http://localhost:5999 endpoint whenever its main API call fails.

Hotel Bedding Rating Extension builds a browser fingerprint and sends it with every rating you submit.

Narad.ai streams raw microphone audio to its cloud backend for wake-word detection instead of listening locally.

Similar Feed automatically reads up to 500 recent history items and all bookmarks each day and sends up to 30 of them to a backend.

TravelPins stores your saved locations in a browser cookie on google.com and sends the full list to its own server every week.

Hide Spoilers works with Paramount Plus collects your Paramount+ account, subscription, and viewing activity and sends it to its own server.

Majembu reads your Instagram DM conversations and profile info and sends them to its own server to draft and auto-send AI replies.

Dupay Proxy sends the user's activation token over plain HTTP and receives proxy server credentials back in cleartext.