How can an extension change hands with no oversight?

Vivaldi has two new features that I think you'll like: a way to hid the browser "cruft" when you don't need it, and a new follower tabs feature.

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

A new font-rendering attack causes AI assistants to miss malicious commands shown on webpages by hiding them in seemingly harmless HTML.

Magecart hides payload in favicon EXIF via third-party scripts, bypassing static analysis and stealing checkout data at runtime.