I found this video on youtube and it sounds like the Honey browser extension is "possibly" acting as malware, by changing affiliate links you want to use to help a creature you want to "tip" with their link use. But in turn Honey switched the link to them in a "malware" switch-it move.