from Frank C

Summary

This article discusses a significant security breach involving 33 malicious Chrome extensions. These extensions, which had been available on the Chrome Web Store for up to 18 months, were surreptitiously siphoning sensitive data from millions of devices. The compromised extensions included Cyberhaven, a data loss prevention service, and other popular tools such as Reader Mode and AI Assistant.

Two separate campaigns have been stealing credentials and browsing history for months.

If you use Chrome, this applies to you!!!
https://arstechnica.com/security/2025/01/dozens-of-backdoored-chrome-extensions-discovered-on-2-6-million-devices/