ModHeader Extension Pulled Over Hidden Spyware

Google and Microsoft removed the ModHeader browser extension after Stripe OLT discovered a dormant browsing-history collector in version 7.0.18. The collector encrypted visited domains and posted them daily to a Chinese-owned server, though an empty allow-list kept it inactive. The extension had 1.6 million installs across Chrome and Edge.