Crooks recently hacked the popular Google Chrome extension Copyfish after compromising the Chrome Web Store account of German developer team a9t9 software. Crooks took over the code and poisoned the update for most of the 30,000 users who had installed the extension into their Chrome browser. The bad guys still control the extension in their Google developer account so they could update with a new trojan. The Firefox CopyFish extension appears to be unaffected. The malicious packages were removed from UNPKG service Monday, July 31, through a friend-of-a-friend relationship, so the unwanted adware is stopped for now.”]
Source: https://securityaffairs.co/wordpress/61568/malware/copyfish-extension-trojan-adware.html