check you didn't have any extensions installed that had full access to your computer (NPAPI) or had access to contents of tabs, or mtgox.

an extension such as this could inject malicious javascript into your mtgox page.

Will