"Just came across a fascinating (or disturbing, depending on how you look at it) XSS vulnerability discovered on the dark web. Apparently, some shady actors have been exploiting a 0-day vulnerability in a popular Tor browser extension, giving them access to users' sensitive info. Has anyone else heard about this or has any insight?"