An add-on for the popular Firefox browser hid potentially malicious code, possibly contaminating the machines of anyone who downloaded it.