---
id: 2442
title: "It's time to treat browser extensions like supply chain attack vectors"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/browser-extensions-supply-chain-attack"
published_at: "2026-04-25 00:00"
tags: ["ai-security", "supply-chain", "third-party-risk", "infostealer", "oauth", "supply-chain-security", "browser-extensions", "vercel"]
phying_url: "https://phying.com/item/2442"
lang: en
---

# It's time to treat browser extensions like supply chain attack vectors

## Summary

The Vercel breach began with a browser extension: an infostealer on a Context.ai employee's machine exposed OAuth tokens. Aikido says treat extensions as supply chain attack vectors.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2026-04-25 00:00
- **Original:** https://www.aikido.dev/blog/browser-extensions-supply-chain-attack
- **Phying News:** https://phying.com/item/2442