Malicious Chrome extension brings its own JS interpreter to bypass Chrome's MV3 limitations
https://www.okta.com/blog/threat-intelligence/disrupting-shieldguard--a-security-extension-primed-to-drain-cry/