Risk of getting malicious extension from Chrome store way worse than Google's letting on, study suggests

A research study of Chrome Web Store extensions (July 2020–Feb 2023) finds Security-Noteworthy Extensions (malicious, policy-violating, or vulnerable) were installed by hundreds of millions of users (authors report ~346 million SNE installs and ~500 million users affected by vulnerable libraries), that many SNEs persist in the store for years, and that poor maintenance and reused vulnerable libraries make extensions a large-scale security and privacy risk.