negativeSYS.SOURCE: The Hacker News• 2026-09-14T12:54:39+05:30

Malicious Twitch Browser Extension Exposes OAuth Tokens of 31,000 Users via Proxy Servers

#oauth #browser security #data breach

A malicious Twitch browser extension leaked OAuth tokens from nearly 31,000 users to Russian proxy servers by transmitting tokens in URL query parameters. The developer released an update to stop token transmission, but previously exposed tokens remain a risk.

A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service.

The extension, named "Twitch Enhanced Viewer | JeetBot," lists HISHIMIRO/jeetbot.cc as its developer and has the following identifiers on the Google Chrome Web Store and Mozilla Firefox Add-Ons store -

Chrome -

Read original article

*** END OF TRANSMISSION ***

> XCANCEL PLATFORM REMOVED FROM HOSTING AGAIN > RP2350-BASED 386 PC EMULATOR WITH VGA AND SD SUPPORT > EUROBIRDPORTAL: REAL-TIME MONITORING OF AVIAN MIGRATION IN EUROPE > PYTORCH IMPLEMENTATIONS OF MODERN OPEN-SOURCE LLM ARCHITECTURES > VIEWPORT STATISTICS REPORT: DESKTOP AND MOBILE BROWSER DIMENSIONS ANALYSIS > MALICIOUS TWITCH BROWSER EXTENSION EXPOSES OAUTH TOKENS OF 31,000 USERS VIA PROXY SERVERS > NIKE EXITS S&P 100 INDEX FOLLOWING $200 BILLION MARKET CAP DECLINE > EXPLOITING OEM-SPECIFIC KERNEL VULNERABILITIES FOR ROOT ACCESS ON ANDROID DEVICES > MALICIOUS USE OF AI: THREAT FORECASTING, PREVENTION, AND MITIGATION STRATEGIES > TECHNICAL LIMITATIONS AND STRATEGIC CONCERNS OF JPEG XL AS A WEB IMAGE CODEC> XCANCEL PLATFORM REMOVED FROM HOSTING AGAIN > RP2350-BASED 386 PC EMULATOR WITH VGA AND SD SUPPORT > EUROBIRDPORTAL: REAL-TIME MONITORING OF AVIAN MIGRATION IN EUROPE > PYTORCH IMPLEMENTATIONS OF MODERN OPEN-SOURCE LLM ARCHITECTURES > VIEWPORT STATISTICS REPORT: DESKTOP AND MOBILE BROWSER DIMENSIONS ANALYSIS > MALICIOUS TWITCH BROWSER EXTENSION EXPOSES OAUTH TOKENS OF 31,000 USERS VIA PROXY SERVERS > NIKE EXITS S&P 100 INDEX FOLLOWING $200 BILLION MARKET CAP DECLINE > EXPLOITING OEM-SPECIFIC KERNEL VULNERABILITIES FOR ROOT ACCESS ON ANDROID DEVICES > MALICIOUS USE OF AI: THREAT FORECASTING, PREVENTION, AND MITIGATION STRATEGIES > TECHNICAL LIMITATIONS AND STRATEGIC CONCERNS OF JPEG XL AS A WEB IMAGE CODEC