Some shady stuff going on in an injected browser.js file: https://gist.github.com/xbenjii/2048d8edf135b04790be593ee69e...
The only "shady" thing is hiding the Chrome ad on Google's home page, though I guess you can consider that as a convenience once you decide to switch fully to another browser.
I don't know how easy it would be to pull an update for that file however, in which case it could become shady in an instant.