At least five Chrome extensions were compromised in a coordinated attack where a threat actor injected code that steals sensitive information from users. […]
from https://www.bleepingcomputer.com/news/security/cybersecurity-firms-chrome-extension-hijacked-to-steal-users-data/