I have a couple of published extensions and every week I get multiple messages like this.
Knowing how common extension takeovers are is exactly why I don't trust anything other than ublock, a password manager, and my own extensions.
It's a mess and a huge unsolved problem.