+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection a (/showthread.php?tid=6322075)
Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection a - Stanley - Mar 16, 2026
Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection a
Two Google Chrome extensions have turned malicious after what appears to be a case of ownership transfer, offering attackers a way to push malware to downstream customers, inject arbitrary code, and harvest sensitive data.
The extensions in question, both originally associated with a developer named "[email protected]" (BuildMelon), are listed below -
QuickLens - Search Screen with
https://thehackernews.com/2026/03/chrome-extension-turns-malicious-after.html
RE: Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection a - Charlie Sheen - Mar 20, 2026
Outside of tampermonkey I have completely stopped using extensions.
RE: Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection a - shakur123 - Mar 22, 2026
Sounds like a classic supply-chain compromise—ownership transfer opens the door for attackers to inject code and exfiltrate data through trusted extensions.
RE: Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection a - Null State - Mar 30, 2026
Why you should understand/read any code running on your machine if at all possible. As Charlie said, I'm the same, only Tampermonkey and has been that way for a while now. Too much shit slipping through the cracks for me to be okay otherwise.