Over 300 Malicious Chrome Extensions Identified

How is this still possible? I skip extensions (except a password manager and an adblocker) specifically to avoid this crap. The post shares an article from SecurityWeek reporting that more than 300 malicious Chrome extensions have been identified. These extensions were involved in the leak or theft of user data.