Researchers Uncover Chrome Extensions Abusing Affiliate Links and Stealing ChatGPT Access

Cybersecurity researchers have discovered malicious Google Chrome extensions that come with capabilities to hijack affiliate links, steal data, and collect OpenAI ChatGPT authentication tokens. One of the extensions in question is Amazon Ads Blocker ID: pnpchphmplpdimbllknjoiopmfphellj, which...

Malicious code in amazon-seller-analytics-mcp-server (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41939 Malicious code in amazon-seller-analytics-mcp-server (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in amazon-seller-central (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c024eede57523427c4d17065ff707dcc6b11ff31346b6be86a4103202e377ca1 Any computer that has this package installed or running should be considered...

MAL-2025-3608 Malicious code in amazon-seller-central (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c024eede57523427c4d17065ff707dcc6b11ff31346b6be86a4103202e377ca1 Any computer that has this package installed or running should be considered...

Amazon Seller - Customized SSL, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Amazon Seller published at the 'play' market has multiple vulnerabilities...