Tag: token forwarding

1 article

Browser extension icon on a laptop amidst a cluttered home office with a blurred Twitch stream in the background.

Twitch Extension Exposes 31,000 Users' OAuth Tokens

A popular Twitch browser extension, JeetBot, has been exposing the OAuth tokens of over 31,000 users, putting their accounts at risk. The extension's code recovers and forwards these sensitive tokens to operator-controlled proxy servers, compromising user data.

Analyst 207