Some browser extensions, including ones with thousands of five-star reviews, can see your passwords as you type them into websites. A vulnerability in how browsers share page data with extensions gives them unrestricted access to everything on a web page, and some have been caught leaking sensitive user information because of it.