Firefox extension used as password stealer?

Sans has posted a diary here which says that firefox extentions are being used to steal the passwords.i guess this another attack vector for Firefox users.best way to stay safe is to avoid installing such extensions.