Today, browser extensions are ubiquitous. But as a recent malicious campaign shows, they're also a cybersecurity nightmare.