Chrome extensions with hardcoded secrets and leaky HTTP protocols are being exploited by malware, leading to severe privacy risks and operational disruptions.