Mozilla yanks password-stealing Firefox add-on - 07/14/2010

• Computerworld - Mozilla on Tuesday warned users that a password-stealing add-on slipped into Firefox's extension gallery more than a month ago had been downloaded nearly 2,000 times before it was detected.

• Mozila Addons - Add-on security vulnerability annoucement - One malicious add-on and another add-on with a serious security vulnerability were discovered recently on the Mozilla Add-ons site. Both issues have been dealt with, and the details are described below.

 

Re: 07/14/2010 - Mozilla yanks password-stealing Firefox add-on

Add-ons, both a blessing and a curse.

 

Re: 07/14/2010 - Mozilla yanks password-stealing Firefox add-on

What company is behind “Mozilla Sniffer” ?

 

Re: 07/14/2010 - Mozilla yanks password-stealing Firefox add-on

You would think the code would be reviewed before these extensions are approved. Even the name should have rang a bell.

 

Re: 07/14/2010 - Mozilla yanks password-stealing Firefox add-on

The second link that Sir Peter provided also talks of a second add-on, CoolPreviews, that is of concern as well.

 

This is another confirmation that one should not install unreviewed extensions.

The CoolPreviews issue is different, though.

BTW: The same problem can occur with Google Chrome extensions as shown here.