🎯 Steal Web Session Cookie

The items that name it 3

• Socket: Malicious Extensions Drain Axiom Trade and Padre Crypto Sessions
  writeup2026-09-12

  Orbit Tracker collects JavaScript-accessible cookies

• Socket: "JeetBot" Twitch Extension Steals 31,000 Users' OAuth Tokens
  writeup2026-09-12

  Extension content script reads the Authorization header/OAuth token that Twitch's web client uses and relays it via an internal bridge to the background worker.

• Socket: 5 Malicious NuGet Packages Target Chinese .NET Developers
  writeup2026-05-07

  Browser cookie/session token theft from Chromium and Firefox browsers.