Post
Socket
socket.dev
did:plc:n6f3j47vjucu5ijwdmow7n2w
Socket researchers found a malicious Twitch browser extension on Chrome and Firefox with 30,000+ reported users.
It forwards full account-scoped OAuth tokens to a Russian bot service, exposing chat, whispers, and account settings.
https://socket.dev/blog/malicious-twitch-browser-extension
2026-09-11T15:33:47.565Z