A browser extension for Twitch was found to be collecting users' OAuth tokens and transmitting them to a server owned by a Russian operator. The action was described as deliberate, though whether it was malicious remains unclear.
log in to read full article