Low risk browser extensions

Zotero DOI PDF Finder loads remote Bootstrap CSS from StackPath when its popup opens.

[Amazon] show price without fees sends the signed-in user's saved email to amzshowpricenofee.com on page navigation.

akaBiz Zalo exposes its popup to any site, letting framed pages trigger Zalo contact, group, and tag syncs to app.akabiz.net.

beta工具 fetches remote Alibaba tool config, calls configured URLs, and sends encoded responses back to beta.alibaba-inc.com.

bilibili Ads Remover exposes custom Bilibili filtering keywords to scripts on Bilibili dynamic and profile pages.

bizStats sends Wildberries and Ozon product IDs and sales counts, with your API key, to plugin.mpstats.io.

chatvideo sends Bilibili video IDs and extracted subtitle data to www.chatvideo.cc.

click to call requests your public IP address to create a persistent uniqueId for its service.

dLcompare sends game and search terms from matched websites to dlcompare.com for price comparison.

e-Cert Extension lets vendor sites and other extensions pass method payloads to a Hongkong Post native signing host.

etailinsights Shopping Cart Analyzer sends the active site URL and a browser fingerprint hash to api.etailinsights.com.

griffel-devtools marks every page frame in sessionStorage when it runs on all URLs.

iByzPaint Editor fetches remote rules that can cover popular websites with a fake browser-support download overlay.

iPanopto accepts RSS video lists from any active-tab URL containing panopto.com and downloads the listed files.

iTracker: IG Unfollower Checker uses vendor rules to make Instagram API requests with your session data.

insidebar.ai lets framed AI provider pages receive webpage messages that write text into their prompt boxes.

lavender | new tab sends precise coordinates to OpenWeatherMap when its new-tab weather feature is used.

The extension sends Wildberries seller supplier phone numbers and IDs to mphero.io weekly.

The extension sends Wildberries supplier phone contacts and old IDs to plugin.mpstars1.ru.

mpstats.club forwards Wildberries supplier contact phone numbers and supplier IDs to plugin.mpstats.club.

msgboxx opens an authenticated WebSocket to wsapi.msgboxx.io from each visited top-level page.

n8n extension for Chrome loads its popup icon stylesheet from unpkg.com when the popup opens.

nTab signs its ntab.dev API requests with a hardcoded key embedded in the extension.

nVampeta replaces images on every website with remote Imgur images, causing browsing-time requests to i.imgur.com.

nhaphangtocdo.vn evaluates 1688 page script text in its content script and disables Taobao risk flags.

nuTab sends saved bookmark hostnames to icon.horse when it loads remote favicon images.

pipebox stores a page-supplied token as its account token and sends it to api.pipebox.pro.

psyProctor lets externally connected pages send screen and microphone recordings to caller-supplied upload endpoints.

sip lets any HTTPS page read its wallet settings through a hardcoded bridge namespace.

studyfoc.us lets any website enable time-spent tracking and forward visited hostnames to StudyFoc.us pages.

tab.pics fetches new-tab photo metadata over HTTP from tab.pics for the selected subreddit.

thegivingmachine sends matched shopping-site visits to Google Analytics.

tjekpånettet.dk sends each visited site's host to ScamAdviser for reputation scoring.

vtexSnitch inventories marketing and VTEX request URLs and pixel IDs on every website you visit.

xBull Wallet lets webpages request wallet connection and public-key access through its injected browser bridge.

zipBoard removes CSP and X-Frame-Options protections from every top-level and embedded page it can match.

zkID Wallet lets web pages query whether the wallet is locked.

The extension routes ChatGPT-related sites through hardcoded or remotely configured proxy servers.

Молния VPN includes its premium-token signing key in the extension, allowing local PRO entitlement tokens to be generated.

Поиск по фото на Wildberries sends page URLs, titles, and referrers from all sites to Google Analytics.

Я.Кликер sends selected or current-page URLs to lnk.name for link shortening.

云神价-购物点点 reads Weibo account IDs from open tabs and sends them to www.yunshenjia.com.

免费在线视频下载器Plus removes Facebook X-Frame-Options headers from every facebook.com response.

The extension removes CSP and X-Frame-Options headers across sites and accepts frame messages that submit text to Qwen.

月亮树MoonTree极速调价插件 stores saved MoonStatistics credentials and user tokens with a hardcoded in-bundle password.

特卖选品 - TemuFilter lets Temu pages request its Chrome extension ID through an injected page bridge.

网站SEO助手 lets any website ask its background worker to fetch caller-chosen URLs with supplied headers.

美客多选品助手 exposes browser cookies and extension-powered fetches to pages on its partner domains.

虾秘- Shopee虾皮达人邀约工具 lets Shopee seller pages fetch arbitrary URLs through its background worker.

行云-plugin loads JD employee profile and ticket workflow data over cleartext HTTP.

视频速度控制器 video speed controller conditionally routes Chrome update checks through agency.pictureknow.com.

讀 Extension lets any webpage ask the extension to read selected or page text aloud through Chrome text-to-speech.

超强AliExpress速卖通类目查询 inserts remote HTML from rangtaobaofei.com into AliExpress item pages.

超强科技TM自动抢库助手 reads a Temu seller mallid request header and sends it to da.rangtaobaofei.com.

The extension lets matched vendor pages read browser cookies and make extension-privileged fetches.

速蜂工具箱-Tiktok-商品机会词，清理无流量 sends page URLs and referrers from TikTok, TikTok Shop, and Baidu pages to Aliyun RUM.

이세돌 뱅온 예약기 sends the user's heart-points totals and optional nickname to Firebase every hour.

Dingocoin Wallet exposes the user's active wallet address to any HTTPS website with no confirmation prompt.

Twitter download helper checks api.pictureknow.com for updates and can route Google update-host traffic through a vendor proxy.

크림헬퍼SIBNA sends Kream product page URLs and product titles to 18nike.com.