\ Twitch extension with 30K installs exposes users’ OAuth tokens — News Eagle Live

LIVE

◆Vikings' O'Connell says he doesn't fault Packers for hit on Murraywww.espn.com - TOP ◆LSU, Ole Miss plea for 'Southern hospitality' in Kiffin's returnwww.espn.com - TOP ◆Sarkisian: Ohio St. should be rewarded for playing Texaswww.espn.com - TOP ◆Wetzel: Sports should be a unifier, not a political dividerwww.espn.com - TOP ◆SEC's Sankey says CFP expansion not foregone conclusionwww.espn.com - TOP ◆Jensen Huang puts Trump on speakerphone onstage to announce robots won’t take over the worldThe Verge ◆Sources: Clippers, Raptors complete trade sending Leonard to Torontowww.espn.com - TOP ◆Kerala HC issues notice to Mani C. Kappan on petition seeking disqualification as Pala MLAIndia Latest News: Top National Headlines Today & Breaking News | The Hindu ◆The warmest summer on record: 2026 hit a scorching new high in the USLatest from Space.com ◆Nintendo Opens the Zelda: Ocarina of Time Pre-orders Fans Were Waiting ForPolygon.com ◆Jarange-Patil vows to take Maratha quota fight to Mumbai; 10 people, two ambulances to accompany him on Sept. 15India Latest News: Top National Headlines Today & Breaking News | The Hindu ◆Homebrew 7.0.0 gets built-in GUI, better security controlsBleepingComputer ◆Valve’s virtual reality plans hit actual realityThe Verge ◆DBT transfers reach Rs 2.08 lakh croreEconomic Times ◆UK regulators to develop tokenization roadmap after industry feedbackCointelegraph.com News

News EagleLIVE

Submit News Log in →

← Back to news

cybersecurity

Twitch extension with 30K installs exposes users’ OAuth tokens

BleepingComputer Sep 14, 2026 · 7:03 PM 👁 0 views ❤ 0 likes

A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]

Read full story at BleepingComputer ↗

Twitch extension with 30K installs exposes users’ OAuth tokens

More in cybersecurity

Homebrew 7.0.0 gets built-in GUI, better security controls

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Hackers target exposed Vite dev servers to steal AWS, Azure secrets