Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

Google and Microsoft have removed the ModHeader extension from their stores due to a hidden browsing-history collector found in its code. The extension had approximately 1.6 million installs across Chrome and Edge. The collector was dormant and did not appear to have gathered or sent any browsing data, as it was kept inactive by an empty allow-list. No evidence has been found that the collector was ever used to collect browsing domains. The extension's removal was prompted by the discovery of this hidden collector.