CHROME EXTENSIONS CAN STEAL PLAINTEXT PASSWORDS FROM WEBSITES

Summary from the TLDR InfoSec newsletter

A team of researchers from the University of Wisconsin-Madison has uploaded to the Chrome Web Store a proof-of-concept extension that can steal plaintext passwords from a website's source code.