A single malicious browser extension — the kind with permissions so common that ad blockers routinely request them — is all it takes to seize complete control of the AI agents now built into five of ...