A fake Perplexity extension (flkebkiofojicogddingbdmcmkpbplcd) intercepted all search queries and logged search terms, HTTP headers, IP addresses, and user-agent data.
Malicious npm packages impersonate legitimate Rollup polyfills and enable North Korean actors to steal data and gain remote access to developer systems.
