🚨 ICYMI - 245 browser extensions contained a code library called Mellowtel which allows anyone to make requests through your browser while extension owners get paid. This has impacted over 900,000 users! Let's take a look at how it works! 👇 The library is easily added to any extension which already has 'declarativeNetRequest', 'storage' and '<all_urls>' permissions defined. These are quite common but also provide quite a bit of access to the browser. A background script and content script are also included.