27 of a 100 tested Google Chrome extensions have been found vulnerable to data (passwords, history, etc.) extraction attacks though specially crafted malicious websites or by attackers on public WiFi networks.
A trio of security researchers have manually analyzed 50 of the most popular Chrome extensions and added to that list 50 more chosen by random.
The bad news is that over 25 percent of the tested extensions were found to be vulnerable, and among them are seven that are used by over 300,000 users.
Read more: Help Net Security