Detection of Hardcoded Secrets in Chrome Extensions
Researchers have identified a recurring issue where API keys, secrets, and authentication tokens are hardcoded within the JavaScript code of popular Chrome extensions. These exposed credentials are easily retrievable by inspecting the extension package, enabling threat actors to abuse associated services.
Microsoft Sentinel (KQL)
