Researchers: hard-to-detect malicious Firefox add-ons can hijack very popular add-ons like NoScript and Firebug to execute malicious code and steal data
NoScript and other popular Firefox add-ons open millions to new attack — Unlike many browsers, Firefox doesn't always isolate an add-on's functions.