Same thread as the Phorion article I read on the compromised extension.
Reply on news.ycombinator.com