Many crytocurrency users have a browser extension based "wallet". A malicious update pushed to Metamask, the most popular ethereum wallet application, could end very badly.