radar

ONE Sentinel

securitySecurity/THREATS/HIGH

Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft

sourceThe Hacker News
calendar_todayMarch 9, 2026
schedule1 min read
lightbulb

EXECUTIVE SUMMARY

Chrome Extensions Turn Malicious Post Ownership Transfer, Sparking Security Concerns

Summary

Two Google Chrome extensions have become malicious following an ownership transfer, enabling attackers to inject code and steal data from users.

Key Points

  • Two Chrome extensions have turned malicious after an ownership transfer.
  • The original developer associated with the extensions is "[email protected]" (BuildMelon).
  • The extensions allow attackers to inject arbitrary code and harvest sensitive data.
  • This incident highlights the risk of malicious activity following changes in extension ownership.

Analysis

The transformation of these Chrome extensions into malicious tools underscores the vulnerabilities inherent in software ownership transfers. Such incidents can lead to significant security breaches, as attackers exploit the trust users place in extensions. This case illustrates the need for stringent monitoring and validation processes for extension ownership changes to prevent similar threats.

Conclusion

IT professionals should closely monitor the extensions used within their organizations and educate users about the potential risks of extension ownership changes. Regular audits and the use of security tools to detect malicious activity are recommended to mitigate such threats.