
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
YT Preview Media Key Blocker
yt-preview-media-key-blocker
Prevents YouTube from hijacking system media keys (play/pause/next/prev) via the MediaSession API. Works with hover previews enabled.
Have you ever been listening to music in Spotify or Apple Music, then hovered over a YouTube video — and suddenly your keyboard's play/pause button stopped working for your music?
That happens because YouTube quietly takes control of your media keys the moment a video preview starts playing, even if you never actually opened that video. The only way to get your keys back is to close the YouTube tab completely, or turn off video previews entirely.
This extension fixes that. When you're just browsing YouTube — hovering over thumbnails, scrolling through results — your media keys stay with whatever app or tab was using them before. Open Spotify, keep browsing YouTube, and your keyboard controls will keep working for Spotify as expected.
Note: if you actually open a video in its own tab, your media keys will control that video as normal. The extension only prevents YouTube from grabbing them in the background while you're just browsing.
No settings, no permissions, nothing to configure — install and it works. Currently tested on Firefox 150.0.3 (MacBook M1).
FAQs
Prevents YouTube from hijacking system media keys (play/pause/next/prev) via the MediaSession API. Works with hover previews enabled.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.