A Fake Extension Passed Chrome's Review Process on the First Try

Researchers built a proof-of-concept extension designed to steal passwords, submitted it to the Chrome Web Store, and watched it clear review. That's not the only gap they found.