Also, if these developers really wanted to, they could distribute it directly from their site and dynamically generate the extension, packaged with a unique identifier, for each download. This would make it effectively unblockable. So simply identifying an install of this specific extension is not a solution.