Experts uncovered malicious Chrome extensions that replace affiliate links, exfiltrate data, and steal ChatGPT authentication tokens from users.

Strip the types and hotwire the HTML—and triple check your package security while you are at it. JavaScript in 2026 is just ...