Malicious Chrome Extension Steals OAuth Tokens From 30,000 Twitch Users

A malicious Chrome extension called JeetBot, installed by over 30,000 users, stole live OAuth tokens from nearly 31,000 Twitch accounts by forwarding them to attacker-controlled servers, highlighting supply-chain risks in third-party browser tools.

2026-09-14 ~ 2026-09-15 · 2 related posts

• 30,000+ Chrome users hit by JeetBot Twitch extension stealing OAuth tokens — TechNadu · 2026-09-14
• Malicious Twitch Browser Extension Exposes OAuth Tokens of Nearly 31,000 Users — Thionne_WTZ · 2026-09-15