But run Sophos or whatever else if you want.
Most likely … its something like a page you were visiting and you didnt realize.
Or that ‘not checked for security by mozilla’ addon that only has 7k users.
Maybe the ‘logo’ itself is a clue.
My advice is check your habits … nuke the FF local folder if needed (~/.mozilla/firefox/“PROFILE.default”).