Browser extensions turn nearly 1M browsers into website-scraping bots