Mozilla to revamp add-on code review process
Mozilla is dealing with another case of a malicious plug-in for its Firefox web browser, and as a result, is considering changes to its code review process.
The company on Monday removed the "Mozilla Sniffer" add-on from its archive and added it to what it terms a "blocklist," according to a vulnerability announcement released this week. Mozilla learned on Monday that the plug-in contains code that hijacks login details, such as username and password, submitted to any website.
By Mozilla adding the malicious plug-in to its blacklist, users who have installed the program will receive a prompt suggesting they uninstall it. According to the browser maker, the add-on has been downloaded about 1,800 times since it was uploaded to the library on June 6, and there were 334 active daily users as of Tuesday.
