⚠️ Nearly 31,000 Twitch users had live OAuth tokens sent to operator-controlled proxies by a malicious browser extension. JeetBot put the credentials in request URLs, exposing them in proxy logs. Older installs keep sending them until updated. Read: https://thehackernews.com/2026/09/malicious-twitch-browser-extension.html