Add-ins are ubiquitous as "software helpers." But there is a constant risk that such add-ins will suddenly have malicious functions implanted in them. A once popular Outlook add-in stole 4,000 login details and payment details after the developer abandoned the project and a criminal took over the domain.
Further details may be read within this article [use build in translation to read it in English].


