Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability

A popular Chrome ad block extension for YouTube has been found to have the capability to execute arbitrary JavaScript code. The extension, Adblock for YouTube, has over 10 million installs and is featured on the Chrome Web Store. It is designed to prevent web ads from playing on YouTube. The discovery was made by Island during an analysis of the extension. The extension's ability to inject scripts is currently dormant, but it poses a potential security risk. The extension has a significant user base, with its popularity evident from its Featured badge on the Chrome Web Store.