Mozilla Removes Password Sniffer Add-On

It looks like Mozilla has decided to remove and block “Mozilla Sniffer” add-on from addons.mozilla.org website after its review. In addition, blocklist will ask users for such extension uninstallation. Before deletion, add-on was already downloaded 1,800 times and is used by 334 people daily.

Mozilla Sniffer add-on that was uploaded on June 6th logs all the login form fields and sends such data to a remote server.

Affected users are also advised to change their passwords as soon as possible.

In a blog post company has stated that while unreviewed add-ons are scanned for known viruses, trojans and malware, specific behaviors can only be detected by a code review.

[digg-reddit-me]