New Update – 35 Google Chrome Extensions Hacked to Inject Malicious Code

A widespread phishing campaign compromised at least 35 Chrome extensions (≈2.6M users) by using deceptive OAuth-based developer prompts to take over publisher accounts and push malicious updates that harvest cookies, session tokens and credentials and exfiltrate them to attacker-controlled C2 servers; affected extensions include VPNs, AI tools and productivity add-ons, and users are advised to uninstall or update extensions, revoke sessions and monitor accounts.