2 comments

[ 4.3 ms ] story [ 14.2 ms ] thread
It looks like a script was added (insertion.js) that inserts a script from https://unpkg.com.

https://pastebin.com/q9xT21Xr

The script seems to be blacklisted currently, but the new code has a changing hash based on time since install which I think allows the hack to continue working after it has been blacklisted.

I am hoping I am safe as uBlock caught the script before it could be executed due to it coming from 3rd party domain.

https://i.imgur.com/0lck7mG.png