How can an extension change hands with no oversight?

Google finally removed the popular "Save image as Type" Chrome extension for secretly stealing affiliate commissions, a full ...

Malicious Chrome extensions tied to ownership transfers push malware and steal data, exposing thousands to credential theft and system compromise.