This used to happen with some frequency but I haven't heard of it happening in some time now.

Common? Which of the good pw managers' extensions have been compromised in the last year?