Researchers flagged 108 malicious Chrome extensions that infected thousands of users and stole their data and sessions.