Chrome extensions spying on users' browsing data

qcontinuum.substack.com
February 11, 2026
11 min read
67/100
Summary
An automated scanning pipeline identified 287 Chrome extensions that exfiltrate browsing history, collectively installed on approximately 37.4 million devices. This represents around 1% of the global Chrome user base.
Key Takeaways
- An automated scanning pipeline identified 287 Chrome extensions that exfiltrate browsing history, collectively installed on approximately 37.4 million devices.
- The extensions flagged for data leakage are linked to various actors, including Similarweb, Curly Doggo, and Chinese data brokers.
- The methodology used for detection involved monitoring outbound traffic and correlating it with URL lengths to identify potential data leaks.
- The findings highlight ongoing concerns about privacy and data exfiltration through seemingly innocuous browser extensions.
Coverage & discussions
Hacker News · qcontinuum.substack.com
Community discussions
Historical count: 5 · 5 saved in sample · Historical sample
Analysis ready
Community Sentiment
Positives
- Using open source extensions like uBlock Origin allows users to audit the code, enhancing trust and security in their browsing experience.
- The ability to research and monitor updates for extensions can help users protect themselves from potential data exfiltration.
Concerns
- The Chrome Web Store's lack of regulation enables bad actors to purchase legitimate extensions and exploit user data.
- There is a growing concern that even trustworthy extensions can become malware after being bought out, eroding user trust.
Related Articles

MaliciousCorgi: AI Extensions send your code to China
Feb 2, 2026
New Withings Users Must Pay $99/Year for Apple Health Syncing
Oct 15, 2026

Google wins bankruptcy auction for Spirit Airlines emails, chats, documents
Aug 18, 2026

License plate reader searches should require a warrant
Aug 12, 2026

99% of My Website Traffic Is Bots
Aug 7, 2026