I restarted my browser and removed bpwc from that profile. I never saw it again. Now i use it only in a specific browser profile called paywalls. I don't know what extension or ad injection caused it, but that experience, along with the countless articles about the malware in extensions has caused me to be a lot more careful.
I am not accusing bpwc of course, it is open source and well regarded, but if anyone has any insight into what happened I would be curious to hear.