browser extension security

Malicious ModHeader Extension with 1.6M Installs Exfiltrated Browsing Data to Chinese Server

A trusted browser extension used by developers was found secretly stealing visited domains and sending encrypted data daily to a server linked to Chinese actors. Despite removal from official stores, existing installations remain a security risk.