threat-intel Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found A popular Chrome and Edge header-editing extension, ModHeader, was found to contain a hidden browsing history collector, despite claims it didn't collect data. Researchers at Stripe OLT discovered the collector was dormant due to an empty allow-list, but a routine update populated this list, enabling the data collectio… The Hacker News · Jul 13, 2026 High CNextensiondata-collectionheader-editing