ModHeader Malware: Inside the Chrome Spyware Google Removed

Reported 14 Jul 2026 by otx · Severity: medium

ModHeader, a popular Chrome developer extension with over 800,000 users, was flagged and removed by Google for containing hidden spyware. Version 7.0.18 included a covert SDK disguised as a date library (dayjs) that harvested visited domain names, encrypted them using AES-GCM, an