Injects spam code without user approval. Also hijacks the standard "paste without formatting" shortcut, ctrl+shift+v. Injects a script into every single TinyMCE editor in WordPress while the extension is active, meaning this extension is adding code which is then saved to your website itself. I had to go through every website I'd worked on while the extension was active, checking every page and removing the added script code from each.