How can an extension change hands with no oversight?
Reddit users seem to have identified the problem.