Malicious Solidity Pro VS Code Extension Compromises Crypto Wallets and Credentials

A malicious VS Code extension named Solidity Pro has been discovered stealing sensitive data from developers, including cryptocurrency wallets, API keys, and SSH keys. The extension utilized delayed activation and obfuscation techniques to evade detection before executing its theft. Affected users are primarily developers working with Solidity, a programming language for Ethereum smart contracts. Although the malicious extensions have been removed from Open VSX, a related GitHub repository remains accessible, posing ongoing risks. This incident highlights the vulnerabilities in trusted development environments and the potential for significant data loss. Developers are advised to remain vigilant and review their installed extensions for any suspicious activity.

Key Points: • Malicious Solidity Pro extension targets developers, stealing crypto wallets and credentials. • The extension employed delayed activation to avoid detection during initial reviews. • Related GitHub repository remains accessible, continuing the risk for developers.