Hacker News Reader

That's crazy. Did it happen to a public extension or an unlisted one?

Public, with about half a million installations.

I think it was noticed only because this version had a major bug that broke a bunch of websites.