On December 26th, 2024, Cyberhaven sent out an email to their users informing them that their extension had been compromised after an administrator account pushed a new update with malicious code to the Chrome web store. As users investigated the incident, it was discovered that more extensions had been compromised in the same way. This is a live blog post as more is learned about the incident and attack.