The Internxt VPN extension, VPNCity, Uvoice, and also ParrotTalks, a language learning app have also been hacked and need to be updated to remove spyware. The same researcher found attacks under way against several other browser extensions.

x.com/jaimeblascob/status/1872447430362611810

This is the reasoning behind Google's Manifest V3 system for browser extensions, locking them down so that they can't steal all your personal data even if someone does manage to push out a trojan horse.

The problem is that Manifest V3 also breaks long-standing plugin features, particularly ad blockers, because Google makes its money from ads.