Chrome VPN Extension with 100k Installs Screenshots All Sites Users Visit

A Chrome VPN extension with 100,000 installs was caught secretly screenshoting every site its users visited, sparking a heated debate about the validation process for browser extensions. Commenters pointed out that while the source code is technically available for inspection, it's often minified and obfuscated, making it nearly impossible for non-experts to detect malicious behavior. Some users called for reporting the extension to the Chrome store en masse, while others expressed skepticism about Google's willingness to take action, with one commenter cynically lumping it in with the "rest of the Google app store malware." The incident highlighted the importance of carefully reviewing browser extension permissions, as users often misunderstand the implications of granting certain permissions.

Snapshot generated from the HN discussion