right now i get that list from malwarebytes logs, it has yara (or yara-like) rules for chrome extensions instead of just a list of extension IDs