By abusing browser extensions, crooks could inject malicious JavaScript into these domains, and thus gain access to the APIs. "The content script does have access to the DOM (Document Object Model ...

Looking at the SafeBrowse extension's source code, anyone can easily spot that its authors embedded the Coinhive JavaScript Miner, an in-browser implementation of the CryptoNight mining algorithm ...