Malicious Solidity Pro VS Code Extension Steals Crypto Wallets, API Keys and SSH Keys via Telegram

Cybersecuritynews •Tushar Subhra Dutta • August 10, 2026

Malicious extensions are turning a routine developer task into a route for theft. A package named Solidity Pro, as a useful tool for Solidity work in Visual Studio Code, has been used to steal cryptocurrency wallet data and developer secrets. The activity shows how a believable extension name, polished documentation and features can lower […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious Solidity Pro VS Code Extension Compromises Crypto Wallets and Credentials A malicious VS Code extension named Solidity Pro has been discovered stealing sensitive data from developers, including cryptocurrency wallets, API keys, and SSH keys. The extension utilized delayed activation and obfuscation techniques to evade detection before executing its theft. Affected users are primarily developers working with Solidity, a programming language for Ethereum smart contracts. Although the malicious extensions have been removed from Open VSX, a related GitHub repository remains accessible, posing ongoing risks. This incident highlights the vulnerabilities in trusted development environments and the potential for significant data loss. Developers are advised to remain vigilant and review their installed extensions for any suspicious activity. 3 sources 66

Extracted Entities

Malicious Solidity Pro VS Code Extension Steals Crypto Wallets, API Keys and SSH Keys via Telegram

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (2)