A security researcher identified 40 malicious Chrome extensions collectively installed by approximately 21.9 million users, documenting capabilities including credential theft, traffic exfiltration, affiliate link injection, and undisclosed data collection. The analysis found 7 extensions actively transmitting data and 33 containing malicious code not observed firing during testing, with common offenses including full-URL exfiltration, fingerprinting, and unauthorized telemetry.