Yahoo! includes signing key inside Axis (anyone can publish as Yahoo!) (twitter.com)

Fake Yahoo! Axis extension, made by the same guy who tweeted the above: https://github.com/nikcub/yahoo-spoof