#dormant


Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

Jul 13, 2026 // 20:23

Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after researchers found a hidden browsing-history […]

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Jul 9, 2026 // 23:03

Datadog Security Labs is warning of “several overlapping campaigns” that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. “Operators rely […]

Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability

Jun 25, 2026 // 17:22

An analysis of a popular Google Chrome ad block extension for YouTube has uncovered the ability to execute arbitrary JavaScript code. According to Island, the […]

Popular WordPress redirect plugin hid dormant backdoor for years

Apr 30, 2026 // 01:16

The Quick Page/Post Redirect plugin, installed on more than 70,000 WordPress sites, had a backdoor added five years ago that allows injecting arbitrary code into users’ […]