A Twitch Browser Extension exposed 30,000 users' OAuth tokens to a Russian bot service.
The extension promised to block Twitch ads, force 1080p, and auto-collect channel points.
Users: Remove the Chrome/Firefox extension, then disconnect all sessions + reauthenticate.
socket.dev/blog/malicio...