Prompt injection attacks can now be carried out in browser extensions, experts warn.