> Must be a compromised browser extension at this point. In their 2019 breach, JS on arbitrary pages was able to access the contents of LastPass' own extension

> Must be a compromised browser extension at this point. In their 2019 breach, JS on arbitrary pages was able to access the contents of LastPass' own extension to obtain the last used username/password combinations. [0] As, today, the extension now contains 25Mb of JS, making it difficult to audit, I wouldn't say that it has to be someone else's fault until proven. [0] https://bugs.chromium.org/p/project-zero/issues/detail?id=1930 https://bugs.chromium.org/p/project-zero/issues/detail?id=19...