compromised extensions