The original developer of the open source extension sold the extension to an unknown entity in June 2020.
The Register reports that the new owner of the extension submitted a new version of the extension to the Chrome Web Store but did not upload it to the GitHub project site.
Version 7.1.8, submitted initially to the Chrome Web Store, included calls to remote scripts and used remote tracking analytics. The update did request additional permissions, including the permission to manipulate all web requests.
The new owner uploaded a new version of the extension after it got suspended by Microsoft from the company's web store. The new version removed the script but it kept the extra permissions that it requested when the previous version was released.
Developers analyzed the code of the extension versions and discovered additional bits of code that added more weight to the "there is something fishy going on" camp. Thibauld Colas published his analysis on GitHub, noting that the Open Web Analytics script that the extension was using, was "another application trying to pass for it".
Source: https://www.ghacks.net/2021/01/09/w...me-extension-the-great-suspender-here-is-why/