As cited
Copy frozen at (site build).
breaches incidents
Twitch extension with 30K installs exposes users’ OAuth tokens
A Twitch browser extension with 30,000 installations in official Chrome and Firefox stores transmits users' Twitch OAuth session tokens to an external commercial bot service. The extension, called Twitch Enhanced Viewer | JeetBot, exposes sensitive authentication credentials to unauthorized access.
Why it matters: Twitch users with this extension installed have their OAuth tokens exposed to a third party, enabling account takeover, unauthorized streaming, channel modifications, and credential compromise. Security teams should alert users to uninstall the extension and revoke Twitch OAuth tokens immediately.
- Source published
- First seen by Cybersecurity Tracker