Malicious Twitch Browser Extension Leaked OAuth Tokens from 31,000 Users to Russian Bot Service

A malicious browser extension named 'Twitch Enhanced Viewer | JeetBot' leaked OAuth tokens from nearly 31,000 Twitch users to proxy servers operated by a Russian commercial bot service. The extension was available on both Google Chrome Web Store and Mozilla Firefox Add-Ons store. The developer is listed as HISHIMIRO/jeetbot.cc. The extension operated across multiple browser platforms as a cross-store threat.