Here's the research paper where this was disclosed:
Leaky Forms: A Study of Email and Password Exfiltration Before Form Submission https://homes.esat.kuleuven.be/~asenol/leaky-forms/leaky-forms-usenix-sec22.pdf