CERT24Popular Chrome ad-blocking extension contains script-injection capability
An analysis found that the Chrome extension Adblock for YouTube, with more than 10 million installs, had the ability to execute arbitrary JavaScript code. The source states that there is no evidence that a malicious payload was distributed to users through this mechanism.