Researchers have discovered that despite Google's adoption of the Manifest V3 security standard to protect against malicious plug-ins, attackers can still get bad extensions past its review process.
Source: DarkReading
Source Link: https://www.darkreading.com/application-security/google-chrome-store-review-process-data-stealer