*Note*: I am the author of this article. Migration to Manifest V3 has been postp... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		palant on June 1, 2023 \| parent \| context \| favorite \| on: More malicious extensions in Chrome Web Store Note: I am the author of this article. Migration to Manifest V3 has been postponed, all these extensions (like most extensions in Chrome Web Store) are using Manifest V2. Note that the changes in Manifest V3 are meant to prevent security vulnerabilities. Outright malicious extensions will always find a way.

palant on June 2, 2023 [–]

As I said, outright malicious extensions will always find a way. I now discovered a newer variant of these extensions, this time using Manifest V3. And they still run arbitrary code: https://palant.info/2023/06/02/how-malicious-extensions-hide...

Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact