Chrome Extension Work — Keylogger

Keystrokes are sent to a remote server (attacker-controlled). Since Chrome extensions have CORS restrictions, the attacker would either: