A browser extension used by over 30,000 users is transmitting Twitch OAuth tokens to a third-party proxy service, potentially allowing account compromise.
Approximately 31,000 Twitch users have had their OAuth session tokens leaked by the JeetBot browser extension, exposing accounts to unauthorised access.
