Learn how one overlooked flaw in OpenVSX discovered by Koi Secureity could've let attackers hijack millions of dev machines ...

According to researchers at Koi Security, the malicious extensions were part of a coordinated operation involving at least 18 ...

Almost a dozen malicious extensions with 1.7 million downloads in Google's Chrome Web Store could track users, steal browser ...

Despite verified status and high ratings, 18 extensions silently deployed surveillance code, raising urgent questions about ...

Most were removed from the Play Store, but according to BleepingComputer, “many of them continue to be available”. Although ...

Security researchers have discovered 11 malicious Google Chrome extensions that have collectively been downloaded over 1.7 ...

The Geco extension has more than 800 reviews on the Chrome Web Store, 4.2 stars (out of 5), and "featured" placement.

THOUSANDS of Chrome users are being urged to delete immediately certain apps that pose a security risk. It comes after ...

Trusted extensions that had gained tons of positive reviews and installs over a long period of time suddenly turned malicious ...

Attackers placed legitimate browser extensions online and then silently delivered malicious updates to millions of users.

These unsafe extensions know your browsing activity, too.

A vulnerability in the extension publishing mechanism of Open VSX could have allowed attackers to tamper with any repository.