Comment by jrcii

I unpacked the XPIs and inspected the JavaScript source. Nothing suspicious (remote URLs, obfuscated code, etc) looking in there.