Would malicious be a better term? I'm assuming you could fix this, but the majority of computer users would have no idea what this is, or even that the plugin

Would malicious be a better term? I'm assuming you could fix this, but the majority of computer users would have no idea what this is, or even that the plugin architecture exists.