Medium risk browser extensions

Rutor Torrent Search sends typed popup searches to Google Suggest and opens submitted searches over cleartext HTTP.

Euskalbar sends dictionary search terms to several configured sites, including cleartext HTTP endpoints.

Who Deleted Me can send full Facebook page responses to api.deleted.io when detailed error logging is enabled.

mail.com MailCheck embeds reusable OAuth client credentials and sends them in token requests for GMX, mail.com, and web.de accounts.

Tube Archivist Companion sends its API token and optional YouTube cookie export to user-configured HTTP servers.

LocalWeatherAlerts sends each completed page URL and tab context to its server for sponsorship responses.

Simple Form Fill can show saved form-fill snippets inside every visited page when autocomplete is enabled.

Torrent Finder Toolbar sends typed torrent search queries to Google Suggest over unencrypted HTTP.

1688 dropshipping pro can send full-page HTML from matched shopping pages to the ZQ Drop backend.

ABC Wallet stores wallet account approval globally, letting unrelated web pages read the approved account address.

AHi WhatsApp翻译[AI版] reads WhatsApp contact names and phone numbers and sends them to wstrans.890214.net.

AI Anywhere for ChatGPT removes anti-framing headers from AI provider subframes while its editor is open.

AI Assistant sends selected text, GPT-prefixed form text, and page URLs to its AWS GPT backend.

AI Diagram Generator includes a hardcoded OpenRouter API key for diagram generation requests.

AI Magic sends selected or typed page text with the stored account JWT and email to its GPT proxy.

AI Tab Master rewrites shopping links with affiliate IDs and asks tabcategory.ptsolutionsnz.com for promoted AliExpress URLs.

AITransDub sends subtitle text, your user ID, and the video page URL to its translation, TTS, and telemetry APIs.

AdGuard Home Control sends Basic-auth credentials to user-configured AdGuard Home URLs, including HTTP endpoints.

Agenda Hero for Chrome logs selected page content and screenshot prompts to Datadog before sending them to Agenda Hero.

AliFast sends AliExpress and Alibaba product URLs to alisave.info and redirects tabs to returned affiliate links.

AliImage Search routes AliExpress product and store clicks through an eshopwell.xyz affiliate endpoint.

AliPal sends clicked AliExpress product URLs to dailyfinds.xyz through an affiliate redirect.

AliSave redirects AliExpress and Alibaba product pages through affiliate endpoints after enhanced features are enabled.

AliSave rewrites AliExpress product and cart pages through an AliExpress affiliate deep-link endpoint.

AliSave Pro routes AliExpress product and cart pages through an affiliate deep link.

Amazon Affiliate Link Generator sends the active Amazon page URL to amazonspot.net for link shortening.

Amazon Quick BSR Rank creates Firebase Auth accounts with a hardcoded default password.

Anime4K WebExtension can add permissive CORS headers to all media responses when its cross-origin fix is enabled.

Annotate Web stores page-specific drawing and text annotation history in each visited site's localStorage.

Apploye Time Tracker stores remembered login credentials encrypted with a passphrase shipped in the extension.

Arc Peek: Link preview removes CSP and X-Frame-Options headers so linked pages can load inside its preview iframe.

Art New Tabs sends new-tab search terms to trends.search-hub.co when you press Enter.

Art Wallpapers New Tab sends typed new-tab search text to Mystart or SearchesSweet for search suggestions.

Aukcjoner.pl injects an Allegro SMS-code form into pages whose URL text contains allegro.pl.

BDFAST sends birth-verification identity records from BDRIS pages to bdfast.shamol.dev.

Bancarios Profit sends CSGO.net item, roll, and invoice details to ludraapi.site services.

Big Cupom redirects AliExpress pages through Awin with the full current URL in the affiliate request.

Black List Site 2 records full page URLs, page titles, visit counts, and time spent for sites you visit.

BlackTom AI sends quiz page URLs, cookies, page HTML, and configured LMS scrape results to htm88.org endpoints.

Bookface Companion sends Gmail thread participant email addresses to Bookface when Gmail conversations load.

书签地球助手 sends visited page URLs and titles to its statistics endpoint when record-visit mode is enabled.

Bot Assistant reads authToken values from the active page's localStorage for use in its side panel.

BybitEye sends Bybit P2P order, counterparty, chat card, and phone details to bybiteye.tradecode.tech.

CNfans Modal Remover rewrites CNFans product and account URLs to 2024 subdomains and adds affiliate ref=56000.

CSR vs SSR Detector has no confirmed data-sharing findings in this scanner.

Cache Cleaner redirects visits to supported shopping sites through embedded affiliate URLs once per day.

Calculator sends the selected image URL to calculatornow.info when its image context-menu action is used.

Cashback Easy reports active tab origins for store matching and sends overlay telemetry to Google Analytics.

Cassidy can send webpage text and selected screenshots to app.cassidyai.com when page messages trigger its bridge.

Catholic Central GPA Calculator injects a remote GitHub Pages module into MySchoolApp pages.

Chat GPT Side Bar MeaVana sends stored session tokens to PostHog during some expired-session logout flows.

ChatGPT AI assistant for Google Reviews and Questions sends your Google account name and email to Mail Magic.

ChatGPT to PDF sends subscription-check email addresses to Google Analytics.

Check and view XML - VNPT_HNI sends XML export requests with a page UUID or fallback token to VNPT RestService.

ClickApporter sends Amazon cart, product-view history, search terms, and saved-item ASINs to clickapporter.com during checkout.

CloudVPN routes all browser traffic through an unencrypted HTTP proxy when its VPN toggle is on.

Color Picker Chrome Extension sends completed tab URLs and referrers to colors.color-ninja.com with a persistent user ID.

Custom Chrome Shortcut Manager sends shortcut URLs, searches, calculator expressions, and aliases to Google Analytics.

Custom Fields for Google Calendar records its extension panels and sends DOM, URL, page title, and form input events to tglens.tabgraf.com.