Low risk browser extensions

Twitch Adblocker Plus 2.0 exposes its stored settings to any page you visit via an unauthenticated postMessage listener.

Social media Ad finder relays Facebook ad data to fbadcollector.adspyder.io, and any website can trigger that relay, not just Facebook.

Cents Per Point Calculator ships an unused test file containing a hardcoded Hilton session token, but nothing in the extension loads it.

CFCA JJCCB V3 Extension bridges four Chinese bank sites to a local PKI native host, reachable over unencrypted http:// too.

NewTranX sends the first 1000 characters of every page you visit to its own server for language detection, whenever you're signed in.

Dictionary to Notion accepts Notion login tokens from any page served on http://localhost:3000, not just its own OAuth flow.

Vinted Scraper - One-Click Data Export broadcasts every API response on Vinted pages to any script sharing the page via postMessage.

IDX Password Manager wraps vault data with one hardcoded AES key, and can autofill credentials into any page from its URL parameters.

Journey ArtPrompt with Midjourney lets a remote server silently replace the new-tab search engine used for every typed query.

The New York Times News sources every headline, image, and click-through link from a third-party server, notifiernews.com, not NYT.

YouTube Shorts Remover reads the user's Google activity history and profile data, then sends it to a third-party server.

eCaresConnect injects a content script into every page you visit and opens new windows to URLs built from data read off the page.

Verbal loads its uuid library live from jspm.dev with no version pin, in a worker with tabCapture, scripting and all-site access.

VPN Core sends your public IP address and Google account email and name to rgbcore.ru to authorize proxy access.

International Jobs runs a server-controlled DOM scraper across every LinkedIn page it loads on, not just job listings.

Labubu Cursor accepts postMessage commands from any web page and fetches attacker-supplied URLs with the user's credentials.

Sonic the Hedgehog opens a fake 'browser unsupported' page on install that pushes an Opera GX download through dark patterns.

Sticky Notes overrides the new tab page with a search box that submits typed queries to its own server instead of the browser's default search engine.

Streaming Skipper reports your Paramount+ account activity to a third-party server and sends your email address to a second one.

Discord Token Login sends the Discord token you type into it to discord.com as a plain, unencoded URL parameter.

CFCA CertEnrollment relays messages from a narrow set of internal addresses to a local PKI app without validating the command.

CFCA CryptoKit relays a caller-named native messaging host and payload to it, with no allowlist check.

Polyhelper sends Polymarket page details and wallet identifiers to its analytics server.

Notifier for BBC News renders its remote feed into the popup with unescaped HTML, exposing it to markup injection and forced navigation.

BBC Sport renders remote feed content in its popup via unescaped HTML and reports a persistent device ID to its feed server.

CFCA CryptoKit.TRTCW Extension relays native-messaging commands for any page matching one of four bare IP addresses, not a vendor domain.

Wapi IA - Asistente para Mensajes strips WhatsApp Web's Content-Security-Policy header on every icon click and tab switch.

CFCA CryptoKit connects to any native-messaging host that sinotrans.com or y2t.com pages name, with no host allowlist.

Citrix Secure Access (Canary) periodically sends browsing history and device/user telemetry to a Citrix-controlled endpoint.

Click to component listens for window messages with no origin check, letting any page script redirect its next clicked-source URL.

Zevr Guard fetches your public IP from the third-party service api.ipify.org when the side-panel globe is opened.

Vận Chuyển 79 injects a script that overwrites Taobao's anti-fraud flags, disabling its risk detection on every page load.

Sapher Shield sends every website you visit to its own servers for a real-time trust check.

Xuân Trường Logistics defeats Taobao/1688's anti-scraping protections to read prices and bypass risk checks on every page load.

UAR_SKSQUARE_V2P forwards the current page's URL to a local native app whenever the page's DOM contains a specific trigger string.

GH Copilot Master sends your account email and session token to its backend over unencrypted HTTP.

The extension lets any page on broaderway.com.cn tell it which native messaging host to connect to, instead of enforcing one fixed host.

GrabzIt Web Monitor accepts any page's postMessage with no origin check, letting it arm the monitor setup with an attacker-chosen API key.

Smart Office relays messages from any localhost page to its native messaging host without an origin check.

TMDT Việt Trung disables Taobao's own anti-scraping risk flags and OCRs hidden prices off the page.

ChatGPT Ad Blocker runs a content script on every website and applies hide/remove rules fetched from its own server every 6 hours.

Everlink overwrites Taobao/1688's own anti-fraud risk flags to false on every page load.

Quiz Boost AI reads the quiz page's HTML and images and sends them to its own server to generate answers.

e-signer injects a digital signing and certificate API into local file:// pages and forwards requests to a locally installed native module.

Staking Crypto strips X-Frame-Options and CSP headers from Google, Stripe and hexn.io frames browser-wide, not just its own tab.

CFCA CryptoKit.Paperless.WEGO Extension forwards page-supplied native host names and data to a local smart-card app without validation.

Ziplyne Flex Staging Creator overwrites its stored authentication token with data from unauthenticated postMessage events on any page.

Automatic badoo translator sends chat message text to its own translation backend over plain HTTP instead of HTTPS.

Email Tracker + Tracking Pixel Blocker strips security headers on Outlook and IP-lookup pages for any visitor, not only its own users.

CFCA CryptoKit.NCWR Extension relays messages from any page on localhost or 127.0.0.1 to its installed native application, unfiltered.

CFCA CryptoKit.changecloud Extension bridges its own web pages to a locally installed native application over Chrome's native messaging API.

CFCA CertEnrollment relays native-messaging commands from CFCA's own changecloud domains with no further validation.

Train Complet sends your SNCF booking details, name, email, phone, and card numbers, to traincomplet.fr as unencrypted URL parameters.

WF Tools – CRM Utility sends the user's name, phone number and email to a third-party sales CRM during onboarding.

Hide Yo Links stores your PIN and hidden links in plaintext in local browser storage.

Sentience runs its wallet's plugin sandbox inside its own marketing website instead of MetaMask's isolated execution page.

ZipRecruiter Coupon Finder reports the domain of every website you switch to, not just ZipRecruiter, to cashbackeasy.com.

My Weather Tab sends IP-derived location data to weather services from its new-tab page.

Portline Auto Import fetches the dealer's Copart password in cleartext and auto-submits it to log them into Copart.com.

CPR Enroll Agency Connect runs server-supplied automation steps on certification tabs, some via OS-level synthesized clicks.