@fobo I use KeepassXC, which is less convenient but it looks like running a password manager in the same sandbox as Web javascript is a potential vulnerability.
@fobo There have been a few attacks in the past that have worked against LastPass. As far as I know they've been patched within a reasonable timeframe.
@CBrachyrhynchos Do other managers like LastPass have that vulnerability? I'm not a programmer or power user so I'm a little ignorant on javascript vulnerabilities