A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
Twitch extension with 30K installs exposes users’ OAuth tokens
Summary + source link. No paywalls, no tracking.