How can an extension change hands with no oversight?
Honey-like affiliate hijack in question ...