Forty malicious Firefox add-ons harvested wallet keys, and nine of them started as sports-score tools · Polylog