Just dreading a supply side attack...
I restarted my browser and removed bpwc from that profile. I never saw it again. Now i use it only in a specific browser profile called paywalls. I don't know what extension or ad injection caused it, but that experience, along with the countless articles about the malware in extensions has caused me to be a lot more careful.
I am not accusing bpwc of course, it is open source and well regarded, but if anyone has any insight into what happened I would be curious to hear.
That's the default, but Firefox does offer toggle to give it permission to run on all pages you visit, I never clicked it (never seen the need to).
Also for Firefox, Mozilla banned it from their extension store (like Chrome did) after a legal threat from news publishers, but they still have to sign the extension and approve every new release even though it is distributed outside the Mozilla extension store now.
Link for Firefox version: https://gitflic.ru/project/magnolia1234/bypass-paywalls-fire...