What harm can malicious extensions do?
These extensions work very quietly, so they often go unnoticed. But deep inside, they can read your typed passwords, steal copy-pasted data, enter hidden codes on bank or office websites, send you to fake websites, track your browsing history. This is the reason why sometimes even antivirus cannot detect them, because they run only inside the trusted system of the browser.