Medium risk browser extensions

WA Privacy reads your WhatsApp number and sends it with a persistent device ID to a third-party analytics endpoint on every logged event.

News New Tab routes search queries and news requests through third-party domains tied to a publisher affiliate key.

Flashing News & Search replaces the new tab page and routes all searches and news fetches through its own servers using a hardcoded publisher key.

GoGPT monitors every page you visit and can silently redirect your active tab based on a remote command.

FortiEDR Secure Browser reads the plaintext username and password from every form submitted on every site.

CG No Login Master runs its popup script on every website visited, sending the page's origin and the user's IP to its vendor's server.

Xooma Intelligence Disconnector reads your entire Facebook friend list and sends it to its own servers.

OfferAhead sends your live ChatGPT access token to its own server every time you open the popup.

Trello Task Creator routes your full-access Trello token through a developer-owned webpage instead of Chrome's secure OAuth callback.

Find Real Friends reads the full text of your ChatGPT conversations and sends them to its own server.

Apollo Tab sends new-tab searches to its own server tagged with a persistent per-install ID instead of your default search engine.

Clean for LinkedIn hands its own web app your LinkedIn session cookie on request.

WealthPipe sends the full URL of every site you visit or switch to to its own server, with no opt-in.

FortiEDR Secure Browser reads the plaintext username and password from every web form you submit, on any site.