Extension contacts external auth server
firefox Fallout
The latest malware caught across open-source registries and marketplaces — evidence included.
Hostile catches · since Aug 1
500
YESTERDAY
Mon Aug 3 · 6 catches · 0 waves · 3 singles
Extension exfiltrates credentials and browsing data
Clipboard hijacking with hardcoded crypto address
SUNDAY
Sun Aug 2 · 11 catches · 2 waves · 3 singles
Obfuscated API key in browser extension
Fake ad blocker, basketball data stealer
Extension Z 9.8.8
extension-z
biggest blast radius
domain.brand-impersonationhttp.report
5 installs
firefox
1 day ago
Exfiltrates data to external domain
Extension downloads and executes native malware
Steals crypto seed phrases via exfiltration
That's every sector reporting.
The full stream lives in the index →