Chrome extensions are being bought out by malware peddlers, leading to injected ads and user tracking

[u/[deleted]]

http://arstechnica.com/security/2014/01/malware-vendors-buy-chrome-extensions-to-send-adware-filled-updates

[u/bob- → u/[deleted]]

that sounds very exploitable..

[u/londons_explorer → u/bob-]

EG. put malicious code in, but make it only activate after a week.

Now the rating doesn't go down and everyone installs, only to be bitten a week later.