Google and Microsoft Pull ModHeader After Hidden Tracker Found in 1.6M-Install Extension

**ModHeader** — a popular browser extension with ~1.6M installs — was removed from the Chrome and Edge stores after researchers found dormant code capable of recording and exfiltrating users' browsing history and being remotely activated via an allow-list; platforms removed the extension and the report advises users to uninstall it, audit extensions, and for enterprises to enforce allowlisting, monitor updates, and prefer auditable/open-source extensions.