[nine_k]

Spook.js was demonstrated to steal passwords from another tab by running innocent-looking JS via the Spectre vulnerability.

https://www.spookjs.com/