I wonder if there’s a central repository of now exploited chrome extensions?

The chrome team does not seem to see security as a high enough priority.