An add-on on Mozilla's official Firefox store reads your crypto trading account, copies the passes that keep you logged in, and messages the thief on Telegram with what it found.