Service Worker Fetch Interception

discovered 2026-05-27

Service worker intercepts all fetch events in the web proxy, injecting tab-interception scripts into proxied HTML responses to enable popunder ad monetization.

Seen in packages