It wouldn’t even have to be malicious btw. These clients are updating haphazardly and presumably without much security review. Expect hacks down the road.
I know some clients have leaked keys before, but through a hack or something.
Please Login to reply.
Oh yeah, because of xss attacks I think.
Yeah that's where another site is able to sneak in malicious code because you link to it in a way you shouldn't.