Cybersecurity researchers have flagged several popular Google Chrome extensions that have been found to transmit data in HTTP and hard-code secrets in their code, exposing users to privacy and security risks.
« Several widely used extensions […] unintentionally transmit sensitive data over simple HTTP, » Yuanjing Guo, a security researcher in the Symantec’s Security Technology and Response