On: We busted a fake Chrome extension that was trying ...

[porlune]

It should be noted, that at one time, Postman was a chrome extension. They recently depreciated that extension.

http://blog.getpostman.com/2017/11/01/goodbye-postman-chrome...

[cws → porlune]

Yep that’s a great point. That deprecation probably contributed to the gap that the malware uploader exploited. People expect an extension called postman, and they find it. Their guard is down and they download the fake one. I don’t know the solution but there has to be a better way for App/extension stores to handle this relatively common scenario.