Enhanced Viewer for Twitch: OAuth token forwarded to JeetBot proxy

The Enhanced Viewer for Twitch extension for Chrome and Firefox contained code that sent OAuth tokens from the Authorization header to a proxy linked to JeetBot. According to Socket, the Chrome extension alone has approximately 30,000 users.

• Tokens were sent to domain enhanced[.]jeetbot[.]cc via auth parameter
• Chrome version of extension has about 30,000 installs
• Streaming works normally, making leak hard to notice
• Recommend removing extension and reissuing Twitch sessions