To add

[randomaccess3]

https://palant.info/2023/06/08/another-cluster-of-potentially-malicious-chrome-extensions/

[randomaccess3]

https://palant.info/2023/06/14/why-browser-extension-games-need-access-to-all-websites/

[randomaccess3]

https://www.malwarebytes.com/blog/threat-intelligence/2023/07/criminals-target-businesses-with-malicious-extension-for-metas-ads-manager-and-accidentally-leak-stolen-accounts

[randomaccess3]

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/new-rilide-stealer-version-targets-banking-data-and-works-around-google-chrome-manifest-v3/

[nicoleahmed]

this is palant's overarching list https://raw.githubusercontent.com/palant/malicious-extensions-list/main/list.txt

[randomaccess3]

Thanks!

[randomaccess3]

https://www.trendmicro.com/en_us/research/23/h/profile-stealers-spread-via-llm-themed-facebook-ads.html

[randomaccess3]

https://www.welivesecurity.com/2013/07/30/versatile-and-infectious-win64expiro-is-a-cross-platform-file-infector/

[randomaccess3]

https://decoded.avast.io/anhho/chasing-chaes-kill-chain/

[randomaccess3]

https://blog.morphisec.com/chaes4-new-chaes-malware-variant-targeting-financial-and-logistics-customers

[randomaccess3]

https://www.bleepingcomputer.com/news/security/backdoored-chrome-extension-installed-by-200-000-roblox-players/