Medium risk browser extensions

Adds searchable or user-provided subtitles to videos on streaming websites.

Voice Control for ChatGPT sends ChatGPT conversation URLs and page titles to Google Analytics with a persistent user identifier.

The extension sends PRO activation emails to videodroid.org and injects remotely-controlled notifications into YouTube pages.

SaveFrom.net helper opens a WebSocket connection to sf-helper.com and can fetch arbitrary URLs on command using full browser permissions.

2048 collects the user's Google account email and sends it as a player identifier to its game servers, including over plain HTTP.

Shows the technologies used on the website you look up with a click.

D.Bridge 2 relays postMessage calls from any webpage to a local native messaging host with no origin allowlist.

Replaces the New Tab page with a customizable dashboard for shortcuts, bookmarks, widgets, and appearance settings.

Nuance PowerMic Web Extension injects a tracking cookie and device-control API into every HTTP/HTTPS page the user visits.

Popup Blocker (strict) exposes a web-accessible UI frame with no origin check, letting any page trigger tab navigation to arbitrary URLs.

Ripple Tool sends raw mental-health search queries to Mixpanel and injects server-controlled HTML into search-engine pages.

The extension fetches remote JavaScript from widgets.trustedshops.com and injects it into e-commerce pages without integrity verification.

This extension provides a VPN service for watching YouTube with faster video loading.

Advanced Ad Blocker fetches remote update data that can inject page elements and replace browser network-blocking rules.

Assinador Digital Qcertifica relays postMessage requests from any web page to a native signing host without validating the message origin.

Cold Turkey Blocker's block-page frame accepts unblock commands from any origin, allowing a blocked site to remove its own block.

Blocks popups and intrusive ads to reduce distractions while browsing.

Custom Calendar Background lets any site set its theme token and adds your Google account email to calendar.useit.today image requests.

Diigo Web Collector lets any matched webpage request Diigo bookmark/account context through unchecked messages.

The extension exposes an unauthenticated WebSocket proxy to every webpage via a content script injected into all URLs.

LikeBoost polls LikeBoost servers and uses your Instagram or Facebook session to like server-selected posts.

Open incognito tab sends feedback messages and the active tab URL to Telegram.

Koala Inspector sends page DOM and form input to OpenReplay while its in-page UI is open.

Speed Dial sends saved bookmark URLs to speed-dial.net over cleartext HTTP when bookmarks are added or edited.

ePadLink SigCaptureWeb SDK Extension relays arbitrary page-controlled data to a local native signature-pad application on every website.

沙拉查词-聚合词典划词翻译 sends selected text over plaintext HTTP to dictionary and translation services.

7TV fetches a remote configuration from its servers to determine which other installed extensions to flag for disabling.

Adds an AI assistant sidebar for writing, summarizing, translating, and brainstorming while browsing.

Ad Blocker Pro reports which sites it blocked ads on, and every Google search you run, to its own server every 4 hours.

Adblock Unlimited imports remote GitHub patch rules that can allow or block browser requests.

Records audio from browser tabs and lets you pause, stop, and download recordings as WAV files.

AudioPick grants microphone permission to a site when a saved non-default speaker preference is applied.

Blocks pop-ups and ads across websites with local filtering and site controls.

BlockTube posts stored YouTube blocking rules into the YouTube page context on matched navigations.

Queues ChatGPT image prompts and downloads each generated image automatically.