Analysis: Popular Chrome Extension ModHeader Exfiltrates User Data

#1

Post by runtimepanic » Sun, Jul 12, 2026, 9:21 PM UTC

Re: Analysis: Popular Chrome Extension ModHeader Exfiltrates User Data

#2

Post by gabrielsroka » Sun, Jul 12, 2026, 11:41 PM UTC

Not the first time? 2023

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

Re: Analysis: Popular Chrome Extension ModHeader Exfiltrates User Data

#3

Post by runtimepanic » Mon, Jul 13, 2026, 8:58 AM UTC

gabrielsroka wrote: post #2

Not the first time? 2023 https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

I didn't know about the 2023 case. Why didn't they remove it back in 2023 then :D

Re: Analysis: Popular Chrome Extension ModHeader Exfiltrates User Data

#4

Post by Chu4eeno » Mon, Jul 13, 2026, 1:43 PM UTC

There's a ton of (known and reported, though google has made that difficult now) malicious extensions on the chrome web store, see e. g. https://palant.info/2025/01/13/chrome-web-store-is-a-mess/

Re: Analysis: Popular Chrome Extension ModHeader Exfiltrates User Data

#5

Post by runtimepanic » Mon, Jul 13, 2026, 3:14 PM UTC

Chu4eeno wrote: post #4

There's a ton of (known and reported, though google has made that difficult now) malicious extensions on the chrome web store, see e. g. https://palant.info/2025/01/13/chrome-web-store-is-a-mess/

I agree but this one have 1.6m downloads