A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users’ Twitch OAuth session tokens to a commercial bot service. The extension ...
A malicious Twitch browser extension has been reportedly forwarding the live OAuth session tokens of around 31,000 users to proxy servers run by a Russian commercial bot service, according to Socket.
Socket found Twitch extension JeeBot harvesting OAuth tokens via proxy servers Tokens excluded only for 10 Russian streamer channels, suggesting deliberate design Developer issued fixes, but users ...