A bad browser extension can be a security nightmare. If it's been hijacked by a bad actor, your personal data may be at risk.