Medium risk browser extensions

Downloads selected or all images from a web page to your computer.

Replaces the New Tab page with a customizable dashboard for shortcuts, bookmarks, widgets, and appearance settings.

Nuance PowerMic Web Extension injects a tracking cookie and device-control API into every HTTP/HTTPS page the user visits.

Replaces the new tab page with customizable speed dials, bookmark groups, themes, and quick access tools.

The extension fetches remote JavaScript from widgets.trustedshops.com and injects it into e-commerce pages without integrity verification.

This extension provides a VPN service for watching YouTube with faster video loading.

Ad Blocker Pro reports which sites it blocked ads on, and every Google search you run, to its own server every 4 hours.

Advanced Ad Blocker fetches remote update data that can inject page elements and replace browser network-blocking rules.

Assinador Digital Qcertifica relays postMessage requests from any web page to a native signing host without validating the message origin.

Cold Turkey Blocker's block-page frame accepts unblock commands from any origin, allowing a blocked site to remove its own block.

Blocks popups and intrusive ads to reduce distractions while browsing.

Custom Calendar Background lets any site set its theme token and adds your Google account email to calendar.useit.today image requests.

Custom profile picture for Netflix uploads your streaming viewing history and account details to third-party servers.

Diigo Web Collector lets any matched webpage request Diigo bookmark/account context through unchecked messages.

Free Time Games executes scripts from its remote changelog inside the extension options page.

The extension exposes an unauthenticated WebSocket proxy to every webpage via a content script injected into all URLs.

Exports and imports browser cookies for sharing website sessions without sharing passwords.

LikeBoost polls LikeBoost servers and uses your Instagram or Facebook session to like server-selected posts.

Netflix Picture in Picture reads Netflix account details and viewing history and sends them to servers it controls.

Open incognito tab sends feedback messages and the active tab URL to Telegram.

QR Code (Generator and Reader) sends generated QR content to short-link services and online decode requests to qrcd.org.

Koala Inspector sends page DOM and form input to OpenReplay while its in-page UI is open.

Speed Dial sends saved bookmark URLs to speed-dial.net over cleartext HTTP when bookmarks are added or edited.

Send bulk WhatsApp messages to multiple contacts without saving each number first.

Disables WebRTC settings to help prevent WebRTC-related IP exposure in the browser.

ePadLink SigCaptureWeb SDK Extension relays arbitrary page-controlled data to a local native signature-pad application on every website.

沙拉查词-聚合词典划词翻译 sends selected text over plaintext HTTP to dictionary and translation services.

VPN VeePN enumerates all installed browser extensions and sends their names, IDs, and versions to an AWS endpoint on install and update.

7TV fetches a remote configuration from its servers to determine which other installed extensions to flag for disabling.

Adds an AI assistant sidebar for writing, summarizing, translating, and brainstorming while browsing.

AboveVTT loads Dropbox and YouTube scripts at runtime into D&D Beyond pages without integrity pinning.