A hacker compromised Cyberhaven's Chrome extension by phishing an employee, potentially impacting other popular extensions as well. Cyberhaven CEO Howard Ting confirmed the attack occurred on Christmas Eve, leading to a malicious version being uploaded, which was removed within an hour. Affected users are advised to update their extensions and monitor for suspicious activity. Reports suggest this attack is part of a broader campaign targeting various Chrome extension developers.