There's a ton of (known and reported, though google has made that difficult now) malicious extensions on the chrome web store, see e. g. https://palant.info/2025/01/13/chrome-web-store-is-a-mess/