Malicious Chrome extensions are bad. But what about nice ones that can be hijacked? This new tool spots them