logoalt Hacker News

gowldlast Thursday at 9:19 PM0 repliesview on HN

You log in to goodsite.com

goodsite.com loads a script from user-generated-content-size.com/evil.js

evil.js reads and writes all your goodsite.com account data.