Security researchers have discovered 29 malicious Chrome extensions disguised as ad blockers that hijack Amazon affiliate links and steal ChatGPT tokens from users.