“Actors who are asking me to add some tracking code are mostly interested in reselling users’ data,” Anashkin said. “Actors who want to purchase it outright will stuff it with malware depending on their level of greed: hijacking affiliate links, tampering with search results, showing popups with shady websites, etc.”

Anashkin, who began documenting these solicitations on GitHub two years ago, at the time explained, "The main reason I continue to maintain this extension is because I can hardly trust others to not fall for one of these offers.