How can an extension change hands with no oversight?

A popular Chrome extension, "Save image as Type," changed ownership and was updated with malicious code to covertly inject ...