The reporter's experience with reporting Chrome Web Store malware reflects mine: Nobody at Google cares about malware enough to stop distributing it when people report it. The "Report Abuse" button probably goes straight to an unmonitored spam folder.

Hint to anyone working on security at Google: It actually doesn't matter what obscure zero-days you discover and patch when you distribute malware directly that relies on supported functionality. There's no need to exploit security holes when malware is simply permitted as-is.

Shut the Chrome Web Store down until you're prepared to take it seriously.