Medium risk browser extensions

Overprice sends page URLs to overprice.app and can return server-directed page content extractions.

Page Load Stats fetches remote rules that can inject chosen scripts into matching visited sites.

Password Generator sends new-tab search or URL input to isrcfornow.com with affiliate parameters.

Personalized Backgrounds sends new-tab search queries to goog.personalizedbackground.com.

Pianoic replaces the new tab with a search box that sends entered searches or URLs to rsrc2u.com.

Pixdownify Image Downloader sends hourly Google Analytics heartbeat events with a persistent extension client ID.

Play to Kodi sends Kodi JSON-RPC credentials to the configured media server over HTTP.

Plus collects cookies from every third-party domain a captured page's resources come from, then uploads them with each snapshot.

Prime Connect - Message Sender sends WhatsApp phone-number and location analytics to Google Analytics.

Prime Party Extended [QVI] sends Amazon and Prime Video account details and remotely requested viewing data to its servers.

Privacy Extension for WhatsApp Web sends WhatsApp page telemetry and a persistent client ID to Google Analytics.

Product Image Downloader sends page URLs, user-agent details, and generated IDs to a hardcoded Slack webhook.

Progressive Shopper sends each HTTPS page's hostname to progressiveshopperapi.com when pages load.

Promo Coders sends visited site domains and Google result domains to getutintsofthe.org for coupon lookups.

QuizGPT sends Kahoot questions and answer choices to api.quizgpt.site and puts its bearer token in pricing-page URLs.

Random number generator redirects matching site visits through a bit.ly URL that appends the current page URL.

RecipeSearch force-navigates the user's active tab to its own landing page immediately after install, with no user action.

Ricoh Cloud Print uploads selected print documents and printer settings to Ricoh's cloud API.

Safesearch Lab sets itself as the default search engine and routes queries through a tracking redirect before reaching Yahoo.

Satoru Gojo: Unleash the Power of Jujutsu! Gameograf fetches remote Gameograf HTML and injects it into its new-tab page.

Search by image on Amazon sends visited page URLs to apiheaven.io and may redirect a tab through apiheaven.io/pulse.

Search to Play the Song sends NetEase searches and playback lookups over cleartext HTTP.

Secure Shield by Secure Shell redirects Google and Bing searches to Secure Shield Search with the original query.

SeekIt sends search queries and browser context telemetry to analytics.seekit.com when users use search.seekit.com.

Smart LG TV Remote Controller sends TV pairing keys and remote-control commands over cleartext local HTTP and WebSocket connections.

SnakeyRain exposes saved Slither credentials to page scripts through a CustomEvent bridge on slither.io and slither.com.

SocialHub Plus Mix stores its bearer token and account email in WhatsApp Web localStorage.

Solo Leveling Wallpaper sends top-site URLs from the new-tab page to Google's favicon service.

Sound Recorder loads a bundled ad SDK that reports the origin of every page you visit to a third-party ad server.

Spending Calculator for Amazon and Flipkart sends Amazon and Flipkart account contact details to sc.ecombullet.com.

StockGlow sends each visited page's domain and path plus stock-detection events to Mixpanel with a persistent extension ID.

StylerGPT for ChatGPT sends a keyed hash of the user's ChatGPT email to api.stylergpt.com for trial checks.

THunt Image Downloader collects Temu product and store page data and sends it to temuhunt.com.

Tab Manager for Chrome exposes current-window tab titles to pages when its overlay is opened.

TecWorld Descontos sends checkout-page URLs and selected page values to descontos.tecworld.com.br.

Telegram Blur - Advanced Telegram Web Privacy contacts ads.brainosia.com from an all-sites content script.

Temporary Contacts sends new-tab search terms to api.tempcontacts.com before running the search.

The QR Extension sends the active tab URL to dynamic QR shortening endpoints when the popup opens.

Tipli sends text scraped from matched shopping pages, along with the full page URL, to www.tipli.ro.

Toca Life: World sends your Chrome top-sites URLs to Google's favicon service when its new-tab page loads.

Top Green Search appends a persistent session ID to searches sent to topgreenview.com.

Total Privacy For WhatsApp Web requests ads.brainosia.com from every page a user opens.

Trackerbot sends full e-commerce page HTML to its odd-jobs server when server-supplied debug flags request templates.

Transtore fetches remote rules from storefront.transtore.app and injects configured HTML into matched sites.

Travel Backgrounds forwards new-tab search terms to searchtravelbg.com.

Treble.ai HubSpot Integration places the stored Treble API key in a page-visible HubSpot iframe URL.

Tropical Horizons Wallpapers sends new-tab search queries to trop.tropicalhorizon-ext.com.

Tubi Ad Skipper sends Tubi account identity, continue-watching data, and playback events to me3x.online.

Tyler Hearing Fan Tab sends new-tab search queries to addents-leasure.icu.

UAR_SKT captures the full page DOM on every navigation and forwards matching URLs to a locally installed SKT corporate management application via native messaging.