Yes it's shocking stuff. Extensions really are a big risk, here's another example: https://www.bleepingcomputer.com/ne...l-wallet-firefox-add-on-stole-cryptocurrency/