See here Chrome Extensions Security Risk