With browser extensions becoming new attack vectors, we need some reliable way to determine if they're running suspicious or malicious code in them before they'

With browser extensions becoming new attack vectors, we need some reliable way to determine if they're running suspicious or malicious code in them before they're able to deploy. It seems like not even Google can properly vet their extension before they're added to the extensions store. The only way I've found to try and detect these as an end user is by using an extension called Under New Management [1], which attempts to alert you if a browser extension has changed ownership, at which point you can pretty much assume they've been compromised. Other than that, I know of no way to attempt to detect these malicious and problematic extensions. If anyone has any suggestions, please share them. [1] https://github.com/classvsoftware/under-new-management https://github.com/classvsoftware/under-new-management