Criminals will submit their "malicious" extension into the official Chrome Web Store. The extension could be anything and – importantly – will perform the job you've downloaded it for.