2026-09-14 19:30 UTC
Popular Twitch ad blocker caught sending live account credentials to Russian proxies
cross-posted from: https://piefed.world/c/tech/p/1400813/popular-twitch-ad-blocker-caught-sending-live-account-credentials-to-russian-proxies
Threat Research Team identified a cross-store browser extension, “Twitch Enhanced Viewer | JeetBot,” that forwards each user’s live Twitch OAuth session token to proxy servers operated by a Russian commercial bot service. The extension ships on both the Chrome Web Store (extension ID pnhhdhhcadcjfckjhpmjneldiegbojfb, 30,000 users) and Firefox Add-ons (twitchenhancedviewer@example.com, 552 users). Both listings are live at time of writing.
Replies (3)
-
@csolisr@hub.azkware.net 2026-09-14 19:38
And that's why you only use open-source addons if possible - less risk of this issue
-
@GasMaskedLunatic@lemmy.dbzer0.com 2026-09-14 20:02
A Google vetted source allowing code that compromises the end user? That’s simply not possible. The developer had to provide an ID to publish the code. It MUST be safe! /s
-
@sovietknuckles@hexbear.net 2026-09-14 20:11
Popular 4 reviews on Firefox Browser Add-Ons I wouldn’t install an add-on that hasn’t been vetted with, at the very least, more positive reviews. I use Alternate Player for Twitch.tv on Firefox, which also has a Russian developer, but it has 4.2 stars and 895 reviews