Poisoned Pipeline / Incidents / AS159

AS159 · 2026-04

131 WhatsApp spamware Chrome extensions

Browser extensions

Socket: 131 spamware extensions targeting WhatsApp flooded the Chrome Web Store.

Mapped techniques

• T0109 Publish malicious artifact
• T0136 Brandjacking

supply-chain campaign

Sources

• https://socket.dev/blog/131-spamware-extensions-targeting-whatsapp-flood-chrome-web-store