Low risk browser extensions

Zevr Guard fetches your public IP from the third-party service api.ipify.org when the side-panel globe is opened.

Amaldate stores operator emails, base64-encoded passwords and session cookies in amaldate.com page localStorage.

Maltix Connect sends the URL of each page you finish loading on its meeting-site hosts to mymosttrusted.net.

Vận Chuyển 79 injects a script that overwrites Taobao's anti-fraud flags, disabling its risk detection on every page load.

Aliexpress search by image rewrites outbound link clicks on any page into aiprice.com redirector URLs when server rules match.

Cdisount image search accepts forged page messages that trigger image uploads and tab opening.

eBay Image Downloader injects a page-script bridge into every frame that any embedded iframe can drive via postMessage.

Tanks Game connects to gamewss.cloudapi.stream and inserts server-supplied HTML, image and link content into its game page.

Package Tracking replaces the default search provider so every address-bar search goes to mypackagetrack.com.

Sapher Shield sends every website you visit to its own servers for a real-time trust check.

Mobphone Web scans every page for phone numbers and builds softphone call links using your stored SIP login.

TorGuard Premium Proxy fetches its proxy server list over plaintext HTTP and supplies stored proxy credentials to the proxy.

Xuân Trường Logistics defeats Taobao/1688's anti-scraping protections to read prices and bypass risk checks on every page load.

Slot Arabian polls mines.cloudapi.stream every 20 seconds and inserts the returned HTML into its popup page.

Threads Translator sends the text of Threads posts to ext-api.com translation servers, in one mode over plain HTTP.

Zedra sends your active wallet address and public key to every open web page without per-site approval.

TG WEB sends your signed-in Chrome profile email to app.soletstalkapp.com when its install page opens.

Selling Keyword shows Naver search keyword volumes by querying the Naver SearchAd API with keywords you search.

UAR_SKSQUARE_V2P forwards the current page's URL to a local native app whenever the page's DOM contains a specific trigger string.

God Assistant builds its pages from remote JSON schemas and runs schema-supplied JavaScript with access to browser APIs.

Relacción Lite rewrites WhatsApp Web's security headers and sends your phone number and licence key to api.sincodigo.pro.

Forza MeaVana removes frame and content-security headers from responses on every site you visit.

GH Copilot Master sends your account email and session token to its backend over unencrypted HTTP.

AliSave Ultra rewrites AliExpress item and cart page URLs to add the developer's affiliate tracking parameters.

o247.vn ordering tool rewrites Taobao and 1688 product links on every page into vendor cashback links.

OysterVPN answers every HTTP authentication prompt on any site with the user's saved account email and password.

Sender Flow sends incoming WhatsApp message text to senderflow.com.br when its warm-up toggle is on.

The extension lets any page on broaderway.com.cn tell it which native messaging host to connect to, instead of enforcing one fixed host.

FlashCart loads a hidden dealyaari.com iframe on Indian shopping sites and appends remote-controlled affiliate IDs to product URLs.

Gearch replaces the new tab page with a search box that sends typed queries to its own search server by default.

Gumnotes records its new-tab notes page with LogRocket session replay and sends it to LogRocket servers.

IsItDownOrJustMe sends the hostname of your active tab to isitdownorjustme.app each time you open the popup.

Colour Ninja extracts colours and gradients from web pages and sends usage analytics to Google Analytics.

Huoloo ChatOS stores operator account passwords, base64-encoded only, in localStorage on the chat site.

n8n AI Assistant sends your chat prompts to retune.so for rewriting before they reach the chosen AI provider.

CLIFL (YTMonster) sends your signed-in YouTube account email or handle to clifl.com with each request.

GrabzIt Web Monitor accepts any page's postMessage with no origin check, letting it arm the monitor setup with an attacker-chosen API key.

Vana Gmail Optimizer runs on Gmail and sends email-draft prompts to Google's Gemini API using a key embedded in its code.

Stock Fund Assistant V3 uploads all synced extension settings and a persistent device ID to topnamei.top every 2 hours.

达助 downloads JavaScript from vendor-set URLs and runs it inside your logged-in TikTok Shop tab.

Qibla Compass sends your precise latitude and longitude to a page hosted on the developer's GitHub Pages site.

TVExtBot sends your exchange API keys and secrets, plus your email, to its own Firebase backend.

Ultra Zap adds WhatsApp Web tools and sends voice-note audio to hiperchat.com.br for transcription when clicked.

Smart Office relays messages from any localhost page to its native messaging host without an origin check.

Auctions soft sends bid details and your IP address to its servers when you click bid buttons on Copart and IAAI.

Royal Motorts Controller removes Copart and IAAI login cookies from the browser when the Royal Motorts extension is disabled or uninstalled.

LeśniewskiCRM reports Copart and IAAI vehicle visits and bids to its CRM backend and autofills shared buyer logins.

TG WEB sends your signed-in Chrome profile email to app.soletstalkapp.com when its install page opens.

Free Web Host zips a site's files and deploys them to Netlify using a developer-owned token embedded in the extension.

StyleGuard Pro rewrites the Content-Security-Policy on every page it loads to allow scripts from saas.styleguard.com.

SLOT KATANA FRUITS loads an ad image and link from multiaccount.cloudapi.stream when the popup's Recharge button is clicked.

AliInvoice checks a remote server on each tab load and can redirect AliExpress product pages through an affiliate link.

CIRA sends the URL of each page you finish loading on its permitted sites to mymosttrusted.net.

CallSwitch One Click to Dial turns phone numbers on pages into dial links and sends dialed numbers to provision.voipcp.com.

The extension rewrites Taobao, Tmall, 1688 and Pinduoduo product links on every page to vendor cashback links.

SignalCore sends click and keypress labels from tbank.ru terminal pages to api.signalcore.ru as usage telemetry.

TMDT Việt Trung disables Taobao's own anti-scraping risk flags and OCRs hidden prices off the page.

Ziplyne Demo Player runs on all pages and fetches guided-demo content from Ziplyne's demo API.

4N sends the URL of each meeting or vendor page you finish loading to mymosttrusted.net, with your profile ID.

Bilibili AI Skip sends Bilibili video audio and subtitles to AI services to find and skip ad segments.