AI Extensions Steal User Chats for Marketing Data