cross-posted from: https://piefed.world/c/tech/p/1400813/popular-twitch-ad-blocker-caught-sending-live-account-credentials-to-russian-proxies
Threat Research Team identified a cross-store browser extension, “Twitch Enhanced Viewer | JeetBot,” that forwards each user’s live Twitch OAuth session token to proxy servers operated by a Russian commercial bot service. The extension ships on both the Chrome Web Store (extension ID pnhhdhhcadcjfckjhpmjneldiegbojfb, 30,000 users) and Firefox Add-ons ([email protected], 552 users). Both listings are live at time of writing.
There is a script you can find that autoblocks twitch ads if you set it up properly. It’s popular but, I forgot it, it uses Ublock origin.
Twitch Adblock Solutions on github? Developer rage quit in disgust of Amazon and archived the repo.
This is the current darling extension to use:
https://github.com/GosuDRM/TTV-AB
It’ll use the standard definition preview stream until the ads stop playing, then switch to the regular stream.