The Twitch Enhanced Viewer | JeetBot browser extension, distributed through official Chrome and Firefox extension stores, collects and sends Twitch OAuth session tokens from users to an external commercial bot service. OAuth tokens are sensitive credentials that allow access to user accounts without requiring passwords. The unauthorized transmission of these tokens compromises user account security by enabling potential token theft and misuse.

Users who installed this extension risk having their Twitch OAuth tokens stolen, which could allow attackers to impersonate them on Twitch, perform actions on their behalf, or access private information. The compromise of OAuth tokens can lead to unauthorized account access and potential abuse of user privileges on the Twitch platform.

Users should immediately uninstall the Twitch Enhanced Viewer | JeetBot extension from their browsers. Additionally, affected users should revoke their Twitch OAuth tokens by logging into their Twitch account and resetting their authentication tokens or changing their passwords to invalidate existing tokens. Avoid installing browser extensions from untrusted sources and monitor Twitch account activity for suspicious behavior.