Hmm. I'll have to read into that more.
I don't use any external libraries, I wrote all of the code in the extension, and the only external requests made outside of the extension are to Google Fonts, so I wonder if it'd be possible to infect this extension.