As of a few hours ago, ModHeader started injecting a script into every page that tracks browsing activity. It also injects ads into Google Search and may be capable of remote tab capture and JS execution.

What a shame