Malicious Twitch Extension Exposes 31,000 Users’ OAuth Tokens

September 14, 2026 · 7:24 am 2 sources

Image: Infosecurity Magazine

Coverage

Coverage

• Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens
  Infosecurity Magazine · September 14, 2026 15:00
  Socket has discovered a Twitch browser extension forwarding users' OAuth tokens to a Russian bot service

More coverage

• Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
  The Hacker News · September 14, 2026 07:24
  A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service. The extension, named "Twitch Enhanced Viewer | JeetBot," lists HISHIMIRO/jeetbot.cc as its developer and has the following…