I distinctly remember when I first got on-boarded to Superhuman their app detected Vimium running and asked me to disable it for their site.
The initial way we checked for it was looking for document.body.matches('*[_vimium-has-onclick-listener]') but apparently that stopped working in 2018. We then used a variation of this code: https://github.com/hackape/Detect-Vimium/blob/master/detect-... which seems to work still.