Can chrome extensions download other chrome extensions and remove itself?

If so can a malicious chrome extension steal passwords and then remove itself?

Can it download other extensions to help with it's attack.

And can this happen without the user knowing?