Low risk browser extensions

Cars From USA logs Copart and IAAI lot activity and bids to its backend and signs users into shared auction accounts.

UrlTool sends the active tab's URL to ksurl.cn when you click its short-link button.

emPartner sends the URL of each page you load on its permitted meeting sites to mymosttrusted.net.

Best Snake fetches HTML from its own server on each popup open and renders it unsanitized in the popup.

AI Chess Tutor loads HTML from linangdata.com into its popup and opens server-chosen links in new tabs.

Flashfire Job Extractor collects job listings from four job sites and sends them to dashboard-api.flashfirejobs.com.

Copilot to PDF uploads the full rendered conversation HTML, page URL and title to its Cloud Run backend on each PDF export.

Whole Form Filler - CTH auto-fills web forms and can send canned outreach messages through GoDaddy's WHOIS contact form.

ARCON Browser Extension lets any web page trigger its proxy, login and SAML automation through an unchecked postMessage relay.

AutoVidu automates prompt sending on Vidu and posts prompts, your email and ID to its own backend for sampled moderation checks.

Better Tab redirects AliExpress and other shop navigations through its affiliate links, replacing other publishers' tags.

The Maverick Connect sends the URL of meeting pages you load to mymosttrusted.net.

Elite Leadership Network sends the URL of meeting tabs you open to mymosttrusted.net along with your profile ID.

Train Complet sends your SNCF booking details, name, email, phone, and card numbers, to traincomplet.fr as unencrypted URL parameters.

MeaVana removes X-Frame-Options and Content-Security-Policy headers from responses on all sites once host access is granted.

Brave Reply drafts hotel review replies on Ctrip, Meituan and Fliggy via brave.dlcircle.com, with a WeChat login.

SimplyBestCoupons fetches its affiliate and merchant config over plaintext HTTP from cdn.simplybestcoupons.com.

Logiline | synchronizer relays auction purchase data from car-auction sites to its CRM backend.

PBS with BBA Compare fetches a GitHub-hosted config on bridgebase.com and runs any JavaScript records it contains.

Spending Calculator for Amazon reads your Amazon order history and account contact details and sends them to ecombullet.com.

Connect Castle Solution adds WhatsApp Web customer-service tools and sends voice-note audio to hiperchat.com.br for transcription.

FLEXZAP adds WhatsApp Web tools and sends voice messages you transcribe to hc-stt.hiperchat.com.br.

Passly accepts workflow instructions from any web page and replays clicks, inputs and form submits in a tab.

Recherche Yahoo par PDF Easy Convert sets craftup.net as the default search engine under the name Yahoo.

Aliexpress Coupon Finder sends the full URL of every page you visit to ext-api.orangeoffer.com.

Azentio Signature Verification Control relays window messages from any web page to a local native host app.

Integração CRM com WhatsApp reads active WhatsApp Web chats and syncs contacts and messages to the user's chosen CRM.

REAL BOOSTER - YouTube fetches missions from irank.kr and drives a YouTube tab to search, watch, like and subscribe.

SpeedNetworkingLive sends the URL of meeting pages you open to mymosttrusted.net on every tab load.

mpstars sends the product page SKU to plugin.mpstars.art and inserts the returned fields into Wildberries and Ozon pages.

Auto Market fetches shared Copart/IAAI login credentials from its backend and fills them into auction login forms.

Focustra Browser Tracker sends the URL, title and active time of every tab to a local desktop app over WebSocket.

MyAdFilter sends the full URL of pages on vendor-listed sites, with ad counts, to api.poc.myadfilter.com.

Redfin Zillow Realtor Superchaged sends listing addresses and visited page URLs to its own API and Google Analytics.

Shopify Spy Pro sends your Chrome profile email and each detected Shopify store's URL to thinksolv.com.

Spotify Web Player Search sets chromecrxstore.com as the default search engine, which its listing does not mention.

WF Tools – CRM Utility sends the user's name, phone number and email to a third-party sales CRM during onboarding.

WLEMMatchMaker sends the URL of each page you finish loading to mymosttrusted.net.

Zap Vende sends WhatsApp IDs and chat IDs to hiperchat.com.br servers when its transfer or API-events features are enabled.

Cart Assistant for 1688 uploads product listing data from shopping pages to index.aiprice.com while you browse.

ClockAssist Enterprise reports visited page URLs and titles to ClockAssist and accepts login tokens from any web page.

Milhas Por Compras redirects AliExpress navigation through the vendor's affiliate links and follows server-supplied redirect rules.

Agile Extension ANID lets any web page request certificate lists and document signing from a native signing host.

AliSave redirects AliExpress product pages through an affiliate link whose key it fetches from a Google Sheet.

The extension relays messages from unionpayintl pages to native host programs on the user's computer.

Hide Yo Links stores your PIN and hidden links in plaintext in local browser storage.

Llamada Web places phone calls through a Duocom account, and any web page can trigger a call via a message.

Private Search Online sets chromecrxstore.com as the default search engine and sends address-bar queries to it.

Profile Connector hands your LinkedIn cookies, including the session token, to Aimfox pages and any localhost page on request.

Wealth99 Connector sends the URL of each page you finish loading on its permitted meeting and vendor sites to mymosttrusted.net.

Carnival Ducks is a game popup that loads a server-controlled banner image and link from multiaccount.cloudapi.stream.

Boomering sends the URL of each meeting page you open to mymosttrusted.net.

FLOW 5.0 opens a live connection to hiperchat.com.br servers carrying your WhatsApp ID and chat IDs.

Lookup - Website Profiler sends the hostname of every page you load to joinlookup.com.

Mh25c Desk relays messages from any web page to a local desktop app and opens tabs the page names.

Nexora Chat connects every WhatsApp Web session to hiperchat.com.br servers using your WhatsApp ID.

QR Print sends the URL of every link on the page to qrpr.tk when you click its toolbar button.

Sentience runs its wallet's plugin sandbox inside its own marketing website instead of MetaMask's isolated execution page.

TravelAgency stores tour-operator platform logins on its server and fills them into matching booking sites for signed-in users.

CFCA CryptoKit relays messages from genesisfin.net pages to any native messaging host named by the page.