ModHeader Extension Pulled After Hidden Data Collector Found

Google and Microsoft removed ModHeader, a header-editing extension with 1.6 million installs, after researchers discovered a dormant browsing-history collector in its code. The collector was inactive due to an empty allow-list, and no evidence suggests it ever transmitted data. The incident highlights risks in browser extension supply chains.