Adblock for YouTube extension allows dormant arbitrary script injection
Source headline: Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
Intelligence Summary
A popular Chrome extension used to block YouTube ads has been found to support dormant arbitrary JavaScript execution. The extension, “Adblock for YouTube” (cmedhionkhpnakcndndgjdbohmhepckk), has 10M+ installs and a Featured badge on the Chrome Web Store. The discovered functionality indicates the code can potentially be triggered later to run attacker-controlled scripts. This increases the risk of browser compromise and user data exposure, especially if the extension is abused or later modified. Users should review extension permissions, consider removal, and keep Chrome and extensions updated.
Recommended Action
Review affected assets, schedule urgent remediation, and monitor related indicators.