For users which have installed Facebook or Instagram “helper apps” a list of 28 dangerous ones have been highlighted as a key security risk, as noted below

Three million users installed 28 malicious Chrome or Edge extensions | ZDNet

Millions of users have had their data stolen by these 15 Chrome extensions – remove them right now! (chromeunboxed.com)

Malicious Browser Extensions | Avast

Based on their recent findings, a total of 28 extensions (15 in Chrome and 13 in Edge) that are mostly geared toward Facebook and Instagram use cases are instead redirecting user traffic to ads and phishing sites and collecting their personal datasuch as their birth dates, email addresses, and active devices. Not only that, but they’re also collecting browsing data and they have the ability to directly download malware onto a user’s device

Below is the list of Chrome extensions that Avast said it found to contain malicious code:

Direct Message for Instagram
DM for Instagram
Invisible mode for Instagram Direct Message
Downloader for Instagram
App Phone for Instagram
Stories for Instagram
Universal Video Downloader
Video Downloader for FaceBook™
Vimeo™ Video Downloader
Zoomer for Instagram and FaceBook
VK UnBlock. Works fast.
Odnoklassniki UnBlock. Works quickly.
Upload photo to Instagram™
Spotify Music Downloader
The New York Times News

Below is the list of Edge extensions that Avast said it found to contain malicious code:

Direct Message for Instagram™
Instagram Download Video & Image
App Phone for Instagram
Universal Video Downloader
Video Downloader for FaceBook™
Vimeo™ Video Downloader
Volume Controller
Stories for Instagram
Upload photo to Instagram™
Pretty Kitty, The Cat Pet
Video Downloader for YouTube
SoundCloud Music Downloader
Instagram App with Direct Message DM