A new campaign dubbed 'GhostPoster' is hiding JavaScript code in the image logo of malicious Firefox extensions counting more ...
It is documented at windowjs.org. Window.js is distributed as a single binary that can be downloaded for Windows and macOS. It can also be built from the sources for Windows, macOS and Linux.