Medium risk browser extensions

RecipeSearch force-navigates the user's active tab to its own landing page immediately after install, with no user action.

Ricoh Cloud Print uploads selected print documents and printer settings to Ricoh's cloud API.

SPM File Edit relays postMessage commands from any page to a local native messaging host with no origin validation.

Safesearch Lab sets itself as the default search engine and routes queries through a tracking redirect before reaching Yahoo.

Satoru Gojo: Unleash the Power of Jujutsu! Gameograf fetches remote Gameograf HTML and injects it into its new-tab page.

Search Toggler routes default omnibox searches through searchtoggler.com with the typed query in the URL.

Search by image on Amazon sends visited page URLs to apiheaven.io and may redirect a tab through apiheaven.io/pulse.

Search to Play the Song sends NetEase searches and playback lookups over cleartext HTTP.

Secure Shield by Secure Shell redirects Google and Bing searches to Secure Shield Search with the original query.

SeekIt sends search queries and browser context telemetry to analytics.seekit.com when users use search.seekit.com.

Smart LG TV Remote Controller sends TV pairing keys and remote-control commands over cleartext local HTTP and WebSocket connections.

SnakeyRain exposes saved Slither credentials to page scripts through a CustomEvent bridge on slither.io and slither.com.

SocialHub Plus Mix stores its bearer token and account email in WhatsApp Web localStorage.

Solo Leveling Wallpaper sends top-site URLs from the new-tab page to Google's favicon service.

Adds preset filters to Gmail for quickly finding and sorting messages.

Sound Recorder loads a bundled ad SDK that reports the origin of every page you visit to a third-party ad server.

Speed Dial New Tab sends the hostname of every bookmark tile shown on its dashboard to third-party favicone.com to fetch favicons.

Spending Calculator for Amazon and Flipkart sends Amazon and Flipkart account contact details to sc.ecombullet.com.

SpoilerProtection sends settings backups and backup passwords over plaintext HTTP.

Sticker Mania injects Google Fonts links into every HTTP and HTTPS page, sending page URLs as referrers to Google.

StockGlow sends each visited page's domain and path plus stock-detection events to Mixpanel with a persistent extension ID.

StylerGPT for ChatGPT sends a keyed hash of the user's ChatGPT email to api.stylergpt.com for trial checks.

Switch My Search sends default search queries to switchmysearch.com through its search provider and redirect rules.

THunt Image Downloader collects Temu product and store page data and sends it to temuhunt.com.

Tab Manager for Chrome exposes current-window tab titles to pages when its overlay is opened.

TecWorld Descontos sends checkout-page URLs and selected page values to descontos.tecworld.com.br.

Telegram Blur - Advanced Telegram Web Privacy contacts ads.brainosia.com from an all-sites content script.

Templates for Google Sheets by cloudHQ reads the email of each signed-in Google account and sends the list to cloudHQ.

Temporary Contacts sends new-tab search terms to api.tempcontacts.com before running the search.

The QR Extension sends the active tab URL to dynamic QR shortening endpoints when the popup opens.

Thống kê Sốp Pi bởi J2TEAM removes Shopee frame-protection headers for Shopee subframes.

Tipli sends text scraped from matched shopping pages, along with the full page URL, to www.tipli.ro.

Toca Life: World sends your Chrome top-sites URLs to Google's favicon service when its new-tab page loads.

Top Green Search appends a persistent session ID to searches sent to topgreenview.com.

Total Privacy For WhatsApp Web requests ads.brainosia.com from every page a user opens.

Trackerbot sends full e-commerce page HTML to its odd-jobs server when server-supplied debug flags request templates.

Translate Web Page stores translated page text, page titles, and URLs in site-readable localStorage.

Transtore fetches remote rules from storefront.transtore.app and injects configured HTML into matched sites.

Travel Backgrounds forwards new-tab search terms to searchtravelbg.com.

Tropical Horizons Wallpapers sends new-tab search queries to trop.tropicalhorizon-ext.com.

Tubi Ad Skipper sends Tubi account identity, continue-watching data, and playback events to me3x.online.

Tyler Hearing Fan Tab sends new-tab search queries to addents-leasure.icu.

UAR_SKT captures the full page DOM on every navigation and forwards matching URLs to a locally installed SKT corporate management application via native messaging.

Ultimate Basketball Fan Extension sends new-tab search queries to search.basketball-fan.com with a tracking ID.

Up Assistant uses remote rules to redirect matched pages and log the original and redirect URLs to ali-stat.info.

V-DOCS for Chrome sends selected or auto-triggered page documents and request details to a local WebSocket client.

VK AD SKIP sends VK video viewing details and account identifiers to vkadskip-api.star-tech.dev.

VPNtube sends selected proxy credentials to any site that asks for HTTP authentication while its VPN is enabled.

Video Downloader Pro sets chromeapps.site as the default search provider for omnibox searches.

Video Recorder exposes camera and microphone device inventory to any page that embeds its permissions screen.