Key Facts
BleepingComputer reports that Twitch Enhanced Viewer | JeetBot, available in the Chrome and Firefox stores, has more than 30,000 installs and forwarded Twitch OAuth session tokens through proxy servers.
Technical Details
The report cites Socket’s analysis, which found the extension appended tokens to redirected proxy requests as an auth URL parameter, placing them in proxy request logs. The developer said version 85.8.7 removes token transmission.
Impact & Mitigation
Remove or update affected extension versions, disconnect Twitch sessions, and re-authenticate to invalidate tokens that may have been forwarded. Avoid routing authenticated requests through third-party proxies.