The author gave a talk on this: https://www.dotconferences.com/2017/12/feross-aboukhadijeh-t...

Some great links present there.

https://feross.org/webcam-spy/

https://feross.org/html5-fullscreen-api-attack/

https://feross.org/

http://www.filldisk.com/

https://developer.mozilla.org/en-US/docs/Web/API/Window/open