Popular Twitch add-on may have quietly shared user login access
A browser add-on for Twitch called Twitch Enhanced Viewer | JeetBot was found sending users’ Twitch sign-in access tokens to a bot service. This could let others misuse affected accounts without the user realizing it.
Who is at risk
People who installed the Twitch Enhanced Viewer | JeetBot extension in Chrome or Firefox and use Twitch are most at risk.
What to watch for
Watch for unusual Twitch account activity, such as unexpected follows, messages, streams, changes to account settings, or sign-ins you do not recognize.
What to do
Immediately remove the extension, sign out of Twitch on all devices, change your Twitch password, and review connected apps or sessions to revoke anything unfamiliar.