Malicious Twitch Browser Extension Exposes 30,000 Users' OAuth Tokens to Russian Bot Service

Reported 11 Sep 2026 by otx · Severity: medium

A malicious browser extension called 'Twitch Enhanced Viewer | JeetBot' distributed on Chrome Web Store and Firefox Add-ons captures and forwards users' live Twitch OAuth session tokens to Russian-controlled proxy servers. The extension, with approximately 30,000 Chrome users and