So malware is abusing Developer Mode to install extensions that share their extension ID with a legitimate Google extension. Pretty clever, and I guess it’s exactly why Mozilla decided against allowing developers install permanent extensions.
https://blog.zimperium.com/abc-soup-the-malicious-adware-extension-with-350-variants/