“Actors who are asking me to add some tracking code are mostly interested in reselling users’ data,” Anashkin said. “Actors who want to purchase it outright will stuff it with malware depending on their level of greed: hijacking affiliate links, tampering with search results, showing popups with shady websites, etc.”
Anashkin’s experience appears to be fairly common. Developers have discussed these solicitations in online forums and several have written blog posts about selling extensions or partnership offers.
The trick is to sell it at a high price and immediately fork. Get paid and fuck off.
Then do it again and again and again. Infinite money glitch. Don’t worry about getting sued after a bit you’ll be rich enough to be immune from prosecution.