Found a rare bug coming from a user and we saw this...

https://forums.mcafee.com/t5/Cybercrime-Phishing/Critical-bug-on-WebAdvisor-chrome-extension/td-p/731011

Literally the extension for an antivirus was hacked?

Submission says:

Version 8.1.0.4679 has a bug in one of scripts: page_crypto_mining.js at line 23:525 (minified version). There is TypeError: 's.startsWith is not a function'. It breaks page scripts on different websites which use arraybuffer. I think this is critical bug.