Mozilla review every update. It means it take much longer to get releases out, sometimes months, but will avoid situations like this.

The Great Suspender Chrome extension was also phished

https://github.com/deanoemcke/thegreatsuspender/issues/512

Typewriter sounds , Twitch window which always on top , one of the Youtube UI upgrade extension, but in this case author simply sell extensions to malicious company

but apparently non-maliciously

What do you mean?

I thought the attacker stole the account maliciously, but hadn't quite gotten around to inserting the malware by the time it was taken back.

The live http headers hacking was quite embarrassing for myself personally.

I had strong suspicions that a certain webhost a new client of mine utilized was both prone to attack, and not very forthcoming when past attacks had occurred.

So when I loaded their own website one day and found it full of ads for russian pornography... I confirmed my own bias that the webhost had been hacked... deleted the account, and moved everything over to AWS.

Changed all the passwords, freaked out a bit, etc...

Then I realized that it was just the extension I was running that injected those ads... d'oh!