Add-ons with 37M installs leak visited URLs to 30+ recipients, researcher says They know where you've been and they're going ...