16 Chrome Extensions Hacked in Large-Scale Credential Theft Scheme

A large-scale campaign compromised multiple Chrome extensions (at least 16, affecting over 600,000 users) by phishing extension publishers into granting a malicious OAuth app access, enabling attackers to push malicious updates that stole passwords, session tokens, cookies and other sensitive data; Cyberhaven publicly disclosed one such compromise and researchers have linked many additional extensions to the same malicious infrastructure, with a list of affected extension IDs provided and guidance to revoke credentials and monitor logs.