Deceptive VS Code extensions like 'solaibot' are stealing crypto wallet credentials, disabling Defender, and deploying persistent spyware on Windows.

Mozilla has issued a warning about a new phishing campaign targeting Firefox extension developers' accounts on the AMO platform, urging them to be cautious of fake login requests.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Google Chrome 140 no longer supports Manifest V2 extensions, blocking popular ad blockers. This article details temporary workarounds and future solutions.

A new campaign by the hacker group WhiteCobra is using fake extensions to infect code editors, stealing cryptocurrency and credentials from developers.

Starting Nov 3, all new Firefox extensions must declare if they collect user data in their manifest.json file for privacy and transparency.

Starting Nov 3, all new Firefox extensions must explicitly declare whether they collect user data. By mid-2026, this disclosure will be mandatory for all add-ons.

The GNOME Shell Extensions team has decided to tighten moderation rules in the EGO catalog in response to

New investigation by Q Continuum reveals 287 Chrome extensions leaking the private browsing data of 37.4 million users to firms like Similarweb and Alibaba.

LayerX research finds 82 Chrome extensions collecting and selling user data, affecting at least 6.5 million users through disclosed but concerning practices.