The signature it generates is used by Chrome to determine whether an upgraded extension really came from the same source. With this leaked, anybody could concei

The signature it generates is used by Chrome to determine whether an upgraded extension really came from the same source. With this leaked, anybody could conceivably put up an upgraded, evil version of Axis and Chrome would happily upgrade it behind the scenes. I say conceivably because you still need to either MitM the Chrome store or get Yahoo!'s credentials to the store.