TL;DR - Advertisers are creating invisible login forms to capture any data your password manager is willing to auto-fill.
— Adrian Sanabria (@sawaba) December 31, 2017
They're allegedly after your usernames, but there's nothing stopping them from capturing your password as well.
1. Block ads
2. Don't allow auto-fill https://t.co/sn34Adcb7N