Skip to main content


Ugh, the #chrome #extension ecosystem is exactly as bad as I'd expect.

And the fact extension is still up claiming not to collect any data even if it has been called out in one of the biggest security newsletters shows how much Google care about this (not much). The only thing they care about is pretending to ship AI features to detect malicious extensions. Because that's how you get promoted.

I mean is it even possible to report a suspicious or bad extension? I don't see anywhere

Great research by @WPalant and @c0m4r

And @campuscodi for putting the spotlight on it.