[rwth-security] Supply chain attack hits Chrome extensions, could expose millions