A malicious Google Chrome extension that can recognize and steal payment card details entered in web forms is still available on the Chrome Web Store.