31,000 Twitch users hit by malicious browser extension — OAuth tokens leaked via Russian proxy network

Socket found Twitch extension JeeBot harvesting OAuth tokens via proxy serversTokens excluded only for 10 Russian streamer channels, suggesting deliberate designDeveloper issued fixes, but users should revoke exposed tokens for safetyA browser extension for Twitch was harvesting people’s OAuth tokens and sending them to a Russian-owned server. The...