Tell HN: A fake, highly obfuscated Solidity VSCode plugin found on marketplace

16 points

a year ago

While setting up a new dev machine today, we noticed that there's a new plugin, listed 3 days ago with more than 2M (fake?) downloads on the MS VSCode Marketplace [0] and OpenVSX [1].

Reverse engineering is still in progress but you probably want to make sure that you don't have this plugin installed and running.

[0] https://marketplace.visualstudio.com/items?itemName=AhmedCrypto.ahmedcrypto1

[1] https://open-vsx.org/extension/juanbIanco/solibidity

1 comment