TechBleepingComputer1h ago
Twitch extension with 30K installs exposes users’ OAuth tokens
TL;DRPopular Twitch extension leaked user login tokens to an external service.
Why it matters: Compromised OAuth tokens let attackers impersonate users and access their accounts.
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
Read full articleSource: BleepingComputer · Opens in new tab