Low risk browser extensions

Relingo runs on every page and sends words and sentences you select to its own API and to third-party dictionary and translation services.

Savvy by Wethrift sends page URLs and titles from visited sites to Google Analytics.

The extension bridges Serasa Experian web pages to a local native host (br.experian.com.serasa) for PKI operations including certificate signing and management.

Smart Mute sends extension lifecycle and settings events to Google Analytics using an embedded API secret.

Speed Booster for ChatGPT modifies the ChatGPT page to reduce lag and transmits license keys to Freemius in URL query parameters.

Translate and Speak Subtitles for YouTube sends device and usage telemetry to a third-party Aliyun log endpoint on install and on UI clicks.

Treatstream reads your delivery address from food-ordering sites like GrubHub and sends it with a session token to treatstream.com.

YourTV Chrome extension bridges web pages to a native host using eval() on both incoming and outgoing messages, creating code-execution exposure.

iLovePDF 2 captures a screenshot of the active tab and transmits it as a base64 image to ilovepdf2.com when the user clicks the Screenshot button.

mail.com MailCheck scans open tab URLs at install to capture affiliate codes and sends account and install data to go.mail.com on uninstall.

n8n Chat reads your full n8n workflow JSON and sends it to the AI provider you choose (OpenAI, Anthropic, or Google Gemini).

one sec intercepts tab navigation to configured websites and displays a friction screen before the user can continue.

Шоппер sends product URL, title, price, and brand to shopper.bonbot.ru on every marketplace visit, linked to a per-install UUID.

uBlacklist filters search results on Google and other engines using user-maintained or subscription blocklists.

IBM Aspera Connect relays unvalidated messages from any web page to the locally-installed Aspera native host.

CyberGhost VPN Free Proxy bundles a hardcoded shared API key that is sent to its backend on every request.

YouTube Downloader adds download buttons to YouTube watch pages and fetches YouTube's player JS at runtime to decode video URLs.

Ezy Speed Test & Custom Web Search replaces the browser's default search engine with Yahoo search using embedded affiliate codes.

Buster bundles Wit.ai API credentials encrypted with a key derived entirely from its own publicly distributed source files.

Shipping Details & Search installs an affiliate-tagged Yahoo search provider and forwards saved tracking numbers to shippingdetails.com.

Manuals Hunt and Search overrides the default search engine to Yahoo with undisclosed affiliate tracking parameters on every search.

Repeek sends FACEIT user IDs and Steam IDs to its own servers when viewing match pages on faceit.com.

Map Route Pro and Search relays search queries and inferred location to its servers and replaces your default search engine with Yahoo.

LetyShops sends account tokens and browsing events to Google Analytics and a GCP endpoint; opt-in on Firefox, opt-out on Chrome.

Flash Player Plus sends a persistent unique user ID and session timing data to flplayer.net on a recurring schedule.

BlockSite sends per-navigation browsing history and a persistent device identifier to its servers when the user enables analytics.

iGraal forwards member ID, a persistent UUID, and merchant URLs to its servers on cashback clicks, and monitors all web requests site-wide.

Easy Games Tab routes all user searches through Yahoo affiliate URLs with hardcoded monetization parameters.

2048 Classic Game sends a persistent UUID to Google Analytics every 60 minutes and writes the extension's runtime ID into visited page DOM.

AI Detector - BitMind sends captured image data and page URLs to api.bitmind.ai for AI-generated content detection on every website.

AZInsight sends Amazon visit counts and domain names to api.loopedin.io on every Amazon page load.

Amazon Prime Freevee Skipper sends Amazon account details, watch history, and email address to me3x.online and metricsmint.quest.

Media Interceptor exposes an extension ID-derived marker in the page DOM on visited sites.

Belfius Smart Card Reader relays commands from permitted web pages to a native card reader host via native messaging.

BitLife Life Simulator Unblocked opens an external publisher page on every install without user interaction.

Bloc de Notas Online is a packaged app that opens an online notepad over cleartext HTTP, so typed notes transit unencrypted.

BookBeam: Extension scrapes Amazon and Audible book metadata on every page visit and transmits it to app.bookbeam.io.

Breeze Search sets breezetask.com as the browser's default search engine, so every address-bar search is sent there.

CFCA SecEditCtl.SRCB Extension bridges pages on srcb.com and shrcb.com to a locally installed native messaging host without validating the host name supplied by the caller.

Cartoon Yourself sends selected text to cartoonify.de over plain HTTP via a context menu shortcut.

ChatGPT Assistant Plus sends a persistent UUID to Google Analytics hourly and silently opens chatgpt.com tabs to refresh session tokens.

ChatGPT for Gmail by cloudHQ sends the user's Gmail address and email content to cloudHQ servers to power its AI reply features.

Chromium browser automation records user interactions including password field values and replays them by executing caller-supplied scripts in page context.

City Bus Driver Car Game opens a promotional publisher webpage on install and redirects to it on uninstall.

Cloaq requests IP geolocation from ip-api.com over HTTP whenever its popup opens.

Clutter Free prevents duplicate tabs and transmits user IP addresses to geoplugin.net over unencrypted HTTP when the premium page is opened.

Connecteur de sécurité banque à distance bridges BPCE-group banking pages to a local certificate-signing application via native messaging.

Cursorland applies user-selected custom cursors across all visited pages using SVG images fetched from cursor-land.com.

DraftSharks Sync sends supported fantasy draft room data to DraftSharks for league draft syncing.

EC Assist captures form input values and full page HTML from monitored tabs to validate Google Enhanced Conversions.

Easy Print transmits every search keystroke typed into its new-tab page to easyprintapp.net as autosuggest requests.

Efaz's Roblox Verified Badge Add-on injects a cosmetic verified badge into Roblox pages and fetches a developer-controlled list of approved users from cdn.efaz.dev.

Elicit attaches the signed-in user's email address and account tier to log events sent to Datadog.

Faceit EGO Enhancer embeds a clash.gg gambling ad iframe with affiliate tracking on FACEIT room pages.

Font identifier assigns each browser profile a persistent UUID and transmits it with telemetry events to onlineapp.pro.

FoundersCard Chrome Extension fetches a benefit list from founderscard.com and injects server-controlled HTML into every visited web page.

Free VPN for Chrome - VPN Proxy SandVPN sends visited URLs and referrers to the SandVPN API when Smart Proxy is enabled.