Here's a one-shot script that does the compare for you, in case it's helpful...
https://www.sfbaylabs.org/files2/2026-02-11/bad_browser_extension_check_osx.sh
You can run it directly if you cut/paste this in your mac terminal... curl -fsSL https://www.sfbaylabs.org/files2/2026-02-11/bad_browser_extension_check_osx.sh | bash
Is there any irony in a thread on browser malware that includes a "please run this bash script blind"?
Not that I don't trust you, but between now and when someone stumbles on this thread, your domain could expire and I could publish something crazy at that url.