A fake Perplexity extension in Chrome completely redirected user inputs and search queries to an attacker-controlled server before forwarding the requests.
A widely used YouTube ad blocker extension possesses the capability to execute arbitrary JavaScript code, presenting a significant security risk to its large user base.