The vulnerability works on Google Chrome and all web browsers that run on Chromium, which includes Microsoft Edge, Brave, ...
Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.
The extension, which uses JavaScript to overlay a fake sidebar over the legitimate one on Atlas and Perplexity Comet, can trick users into "navigating to malicious websites, running data exfiltration ...