Chrome extensions with 1.4M installs covertly track visits and inject code | Hacker News Reader