For those using extensions that are sold on to unscrupulous people, though, it can be very bad news: those users probably won't even realize their favorite add-on has been quietly updated to harvest their info from their browsing, make money from clicks on links via affiliate programs, or worse.