"By harvesting internal and external IP addresses, DNS servers, usernames, and project paths, it enables a threat actor to chart the ... malicious data-stealing extensions have also been uncovered in ...