Using the most common families of malicious extensions as an example, we explain what can go wrong after installing a browser plug-in.