#vscode
-
Malicious Solidity Pro Extensions for VS Code Steal Developers’ Wallets and Keys
Researchers at Yeeth Security have uncovered Solidity Pro extensions that, posing as tools for Ethereum developers, steal crypto wallets, tokens and API keys. The malware activates on a delay to slip past marketplace review and antivirus scanners.
-
Open VSX Removes 77 “Evil Twin” Extensions That Stole Developer Data
The Open VSX marketplace has purged a cluster of 77 malicious extensions that masqueraded as genuine tools and shipped data about developers' systems and environments to a domain controlled by the attackers.