Experts get Google, Microsoft to pull trusted ModHeader with 1.6 million installs after finding it could harvest all kinds of data

Security experts successfully convinced Google and Microsoft to remove the popular ModHeader browser extension, which had over 1.6 million installs, after discovering it was secretly sending data to a third-party server linked to a Chinese actor. This alarming breach revealed the extension could harvest sensitive information from users, including visited domains and potentially more. The removal underscores the critical need for stringent scrutiny of browser extensions and highlights the risks of trusted tools being compromised. It serves as a stark reminder for users to carefully vet extensions and for developers to prioritize security.