Kaspersky make a problem out of installing unknown extensions and but there is no exploit, the worst thing mentioned in the article that an extension can do is “change speed limits”.
That’s a lot more benign than the GitHub Updater similar plug-in for WordPress