Low risk browser extensions

CPR Enroll Agency Connect runs server-supplied automation steps on certification tabs, some via OS-level synthesized clicks.

Cart Assistant for 1688 uploads product listing data from shopping pages to index.aiprice.com while you browse.

ClockAssist Enterprise reports visited page URLs and titles to ClockAssist and accepts login tokens from any web page.

Llamada Web places phone calls through a Duocom account, and any web page can trigger a call via a message.

Mh25c Desk relays messages from any web page to a local desktop app and opens tabs the page names.

Passly accepts workflow instructions from any web page and replays clicks, inputs and form submits in a tab.

The MBXtension sends the URL of each non-LinkedIn page you finish loading to mymosttrusted.net.

Agile Extension ANID lets any web page request certificate lists and document signing from a native signing host.

The extension relays messages from unionpayintl pages to native host programs on the user's computer.

Hide Yo Links stores your PIN and hidden links in plaintext in local browser storage.

Lookup - Website Profiler sends the hostname of every page you load to joinlookup.com.

Private Search Online sets chromecrxstore.com as the default search engine and sends address-bar queries to it.

Profile Connector hands your LinkedIn cookies, including the session token, to Aimfox pages and any localhost page on request.

Wealth99 Connector sends the URL of each page you finish loading on its permitted meeting and vendor sites to mymosttrusted.net.

Xooma Intelligence Disconnector reads your entire Facebook friend list and sends it to its own servers.

Carnival Ducks is a game popup that loads a server-controlled banner image and link from multiaccount.cloudapi.stream.

Boomering sends the URL of each meeting page you open to mymosttrusted.net.

FLOW 5.0 opens a live connection to hiperchat.com.br servers carrying your WhatsApp ID and chat IDs.

Milhas Por Compras redirects AliExpress navigation through the vendor's affiliate links and follows server-supplied redirect rules.

Nexora Chat connects every WhatsApp Web session to hiperchat.com.br servers using your WhatsApp ID.

PptCloud sends the URL of one page you visit each day, plus the previous URL, to officloud.net.

QR Print sends the URL of every link on the page to qrpr.tk when you click its toolbar button.

Search Switch sets your default search engine to customserp.com instead of the Bing integration it advertises.

Sentience runs its wallet's plugin sandbox inside its own marketing website instead of MetaMask's isolated execution page.

B Tools sends the logged-in WhatsApp user's name, phone number, email and country as a sales lead to two undisclosed third-party CRMs.

Brave Reply drafts hotel review replies on Ctrip, Meituan and Fliggy via brave.dlcircle.com, with a WeChat login.

CFCA CryptoKit relays messages from genesisfin.net pages to any native messaging host named by the page.

ClearContext sends the full URL of every page you load to api.clearcontext.co to look up a news bias rating.

Play Games sets itself as the browser's default search engine on install and sends every omnibox search to onlinegamessearch.com.

Resist sends the author and text of every X/Twitter post you view to api.resist-extension.org for analysis.

Sunil Edutech for Teacher sends lesson-plan prompts to OpenAI using an API key hardcoded in the extension.

The Global Chamber sends the URL of each completed tab load on its permitted sites to mymosttrusted.net.

Whole Form Filler - CTH auto-fills web forms and can send canned outreach messages through GoDaddy's WHOIS contact form.

ZipRecruiter Coupon Finder reports the domain of every website you switch to, not just ZipRecruiter, to cashbackeasy.com.

28 Days Habit Tracker runs a bundled ZeroGPU compute SDK that registers your device with devices.zerogpu.ai by default.

CFCA CryptoKit relays messages from DBS bank web pages to a local CFCA native messaging host.

GH Actions Master exchanges your account email, access token, and proxy assignment with its backend over unencrypted HTTP.

Group Exporter 2 sends the signed-in Chrome profile email to soletstalkapp.com each time the popup opens.

My Weather Tab sends IP-derived location data to weather services from its new-tab page.

Oh Mago CRM adds WhatsApp Web CRM tools and sends voice messages to hc-stt.hiperchat.com.br when you click transcribe.

Portline Auto Import fetches the dealer's Copart password in cleartext and auto-submits it to log them into Copart.com.

Pro Tab replaces the default search provider with protab.info, sending every address-bar search to its servers.

Smart Filters downloads its URL-rewriting rules from smarturlcleaner.com every 30 minutes and installs them on all sites.

TK Video Downloader replays TikTok API requests using URLs and headers dictated by a config from echobot.dev.

The Thrive-O-Sphere sends the URL of each completed tab load on meeting and LinkedIn hosts to mymosttrusted.net.

UBER BLACK reads Uber session cookies from the active uber.com tab and shows them as a copyable token.

ZapLead sends WhatsApp voice messages to hc-stt.hiperchat.com.br for transcription when you click 'Transcribe audio'.

Ziplyne Production Creator accepts an unvalidated 'message' event on every page and frame that can overwrite its stored auth token.

Azentio MagTek Excella Control forwards messages from any web page to a local MagTek native host.

The extension relays messages from a fixed list of private-network web pages to a native messaging host.

Foseto reads every visible form field's value, including passwords, and can bundle that into feedback logs shared via Google Drive.

Recipe Finder replaces the default search engine with chromecrxstore.com, labelled 'Internet'.

RoboZapp uploads the full audio of WhatsApp voice messages to hiperchat.com.br when you use its transcribe button.

The Social Capital Collective sends the URL of meeting pages you open to mymosttrusted.net, tagged with your profile ID.

The Weave Networker sends the URL of each loaded meeting-site tab to mymosttrusted.net along with your profile ID.

Wallet Highlighter reads emails and crypto wallet addresses on every page and sends them with the page URL to its servers.

Ziplyne APAC Creator encrypts its API traffic to apacapi.ziplyne.com with a passphrase hardcoded in the extension.

Ali Agent rewrites AliExpress links on every website you visit to route through its own affiliate link.

BSCUT sends email text you enter in Gmail to OpenAI to draft replies, using an API key embedded in its code.

CG Entry Master sends the user's email, access token, and IP address to its server in cleartext HTTP, embedded in the request URL.