Hacker News new | ask | show | jobs
by benatkin 2659 days ago
If someone broke into their account somehow and published a version to the Chrome Web Store, they could do that.

I suggest adding an alert anytime a new version of the extension is published, or if you already get an email from Chrome Web Store each time a new extension is published or the email addresses of the Chrome Web Store account are changed (npm does this I believe), to make sure it gets sent to an inbox that's actively monitored.