Browser Extension Security14 September 2026
Malicious Twitch Extension Siphoned ~31,000 OAuth Tokens to a Russian Bot Proxy
A Chrome and Firefox extension marketed as a Twitch "viewer enhancer" quietly forwarded users' live OAuth session tokens to the proxy infrastructure of a commercial Russian view-bot service — no phishing page or malware payload required.
browser-extensionsoauthsupply-chain-security
4 min readRead
Software Supply-Chain Security8 August 2026
npm's Keyv and Cacheable Hijacked in 'Mini Shai-Hulud' Supply-Chain Worm
A hijacked maintainer account let attackers trojan keyv, cacheable-request and flat-cache — reusing the same Shai-Hulud toolkit seen on PyPI and npm earlier in 2026.
supply-chain-securitynpmshai-hulud
4 min readRead