The extension, which uses JavaScript to overlay a fake sidebar over the legitimate one on Atlas and Perplexity Comet, can trick users into "navigating to malicious websites, running data exfiltration ...
If you're using a hardware security key as your two-factor authentication (2FA) method on X, you'll need to re-enroll by Nov.