[Stanley]

Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection a

Two Google Chrome extensions have turned malicious after what appears to be a case of ownership transfer, offering attackers a way to push malware to downstream customers, inject arbitrary code, and harvest sensitive data.
The extensions in question, both originally associated with a developer named "[email protected]" (BuildMelon), are listed below -

QuickLens - Search Screen with

https://thehackernews.com/2026/03/chrome...after.html

[Charlie Sheen]

Outside of tampermonkey I have completely stopped using extensions.

[shakur123]

Sounds like a classic supply-chain compromise—ownership transfer opens the door for attackers to inject code and exfiltrate data through trusted extensions.

[Null State]

Why you should understand/read any code running on your machine if at all possible. As Charlie said, I'm the same, only Tampermonkey and has been that way for a while now. Too much shit slipping through the cracks for me to be okay otherwise.