As cited
Copy frozen at (site build).
threat intel
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Researchers identified malicious VS Code extensions masquerading as Solidity Pro tools that delivered browser wallet and credential stealing malware. The extensions, distributed under the names helper-beeps.solidity-pro and web3devtoolsx.solidity-pro, have been removed from Open VSX but the associated GitHub repository remains active.
Why it matters: Developers using Solidity and web3 tools face credential theft and wallet compromise if they installed these extensions; practitioners should audit installed VS Code extensions and validate legitimacy of development tools before installation.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Researchers identified malicious VS Code extensions masquerading as Solidity Pro tools that delivered browser wallet and credential stealing malware. The extensions, distributed under the names helper-beeps.solidity-pro and web3devtoolsx.solidity-pro, have been removed from Open VSX but the associated GitHub repository remains active.
Why it matters: Developers using Solidity and web3 tools face credential theft and wallet compromise if they installed these extensions; practitioners should audit installed VS Code extensions and validate legitimacy of development tools before installation.
- Source published
- First seen by Cybersecurity Tracker