Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

A malicious browser extension targeting Twitch users, named ‘Twitch Enhanced Viewer | JeetBot’, leaked OAuth tokens belonging to approximately 31,000 users to proxy servers operated by a Russian bot service. IT and security administrators should audit endpoints for this extension to mitigate potential account takeover risks, as the compromised tokens allow unauthorized access to victim accounts.