Aside from exposing your entire browsing history to any website you visit, the extension offered many security holes for websites to easily execute arbitrary code on any computer with the extension installed. (howtogeek.com)
The first is a remote code execution vulnerability that would allow an attacker to run arbitrary code on the device that could force it to perform malicious actions without the device owner's knowledge. (ibtimes.com)
Oh no, this guy is also a master of arbitrary code execution bugs. (gamingreinvented.com)