How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service

calendar_today September 11, 2026 person Kush Pandya domain socket
Socket’s Threat Research Team identified a cross-store browser extension, “Twitch Enhanced Viewer JeetBot,” that forwards each user’s live Twitch OAuth session token to proxy servers operated by a Russian commercial bot service. The extension ships on both the Chrome Web Store (extension ID pnhhdhhcadcjfckjhpmjneldiegbojfb , 30,000 users) and Firefox Add-ons ( twitchenhancedviewer@example.com , 552 users). Both listings are live at time of writing.
open_in_new Read original post