Chrome Extension Corrupted and Changed by Malware -

i've got popular chrome extension, on time i've got sporadic reports users extension malware, of course not. i've learned there malware programs change files of chrome extension , make turn malware. there way can defend extension kind of changes?

thanks.

you don't have to!

chrome has built-in mechanism preventing it. extension installed web store have signed hash of files included.

at time when chrome loads extension, hashes checked, , if file modified chrome marks extension potentially compromised, disables , warns user of unauthorized changes.

---

that said, protects static files have in extension.

if rely on external scripts, it's duty protect them man-in-the-middle attacks. chrome's default extension csp job of securing against worst offenders, still - if use dynamic code, it's responsibility secure it, if override csp.

finally, if you're using native host module, it's not secured. treat untrusted.