I'm aware of that.
The only one i have installed is this one, which i've wrote myself so i know the code.
So my guess is it has to be something else, but i have no idea a.t.m.
Are you sure? and this address "NKPkRSzrrhQx8ymzT2iNzQ2ktnE3C6QfRt" is in live ticker extension's source.
http://pastebin.com/UuvLSeft
Some weeks ago one guy lost his bitcoins due to same extension.
https://bitcointalk.org/index.php?topic=581373.msg6354489#msg6354489
indeed, the address is in the pastebin you've send.
a list of the extensions installed:
So, what do you think?