It appears that some of the extensions in your block list originate from a supply chain attack which compromised some extensions, but which have since been fixed and are no longer compromised and have returned the Chrome store. This post discusses matching both the ID and version to detect compromised extensions without creating false positives.
For example, only v4.00 of Bookmark Favicon Changer was compromised. Earlier and later versions are clean.
For example, only v4.00 of Bookmark Favicon Changer was compromised. Earlier and later versions are clean.
https://www.elastic.co/blog/how-to-detect-malicious-browser-...