QuickLens Chrome extension steals crypto, shows ClickFix attack

A Chrome extension named "QuickLens - Search Screen with Google Lens" has been removed from the Chrome Web Store after it was ...

Previously harmless Google API keys now expose Gemini AI data

Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI ...
Microsoft

Developer-targeting campaign using malicious Next.js repositories

A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
GitHub

OpenBankProject/API-Explorer-II

This application is used to explore OBP APIs and interact with the data and services in the context of the logged in user. API Explorer needs a Consumer Key / Secret to access the Open Bank Project ...
theregister

30+ Chrome extensions disguised as AI chatbots steal users' API keys, emails, other sensitive data

More than 30 malicious Chrome extensions installed by at least 260,000 users purport to be helpful AI assistants, but they steal users' API keys, email messages, and other personal data. Even worse: ...
GitHub

Valerian7/AI_JS_DEBUGGER

大模型API密钥（兼容OpenAI的API请求格式，如Qwen、deepseek、Chatgpt、Claude等，可自定义添加） AI_JS_DEBUGGER_0.4.0 ├── backend │ ├── app.py # Flask + Socket.IO 入口 │ ├── routes/ # 调试、配置 ...