Comment by l72

The fact that most of these are capturing query parameters:

  "u": "https://www.google.com/search?q=target",

indicates that are capturing tons of authentication tokens. So this goes way beyond just spying on your browser history.