" Permission denied to access property "target" https://hangouts.google.com/webchat/u/0/blank:59"

Looks like some kind of exploit through Google contacts?

This same JS exploit detector has been installed for months, this is new.