Possible attack vector here? Developer is malicious (or their machine is compromised), plugin is updated to include naughty JavaScript on Hacker News. Or alrea

Possible attack vector here? Developer is malicious (or their machine is compromised), plugin is updated to include naughty JavaScript on Hacker News. Or already does something malicious. Running any executable code on my machine is a risk, and should involve a cost-benefit analysis. In this case? Benefit - makes Hacker News look a bit nicer. Cost - I have no idea, without spending a time looking at the source code and Chrome's security policy. So my analysis makes me think it's just not worth installing.