CHROME WEB STORE EXTENSIONS CAUGHT STEALING CRYPTO, BROWSER DATA

Summary from the TLDR InfoSec newsletter

Following a supply chain compromise in which threat actors purchased popular browser tools, nineteen Chrome and Edge extensions were weaponized via automatic updates to silently strip security headers and hijack cryptocurrency transactions before being removed from the Chrome Web Store.