Twitch extension with 30K installs exposes users’ OAuth tokens | CyberBlackmail