ShellCodeX
Tools • Events • News • Insights
ShellCodeX Intelligence Brief
CRITICAL Developer Tools

Solidity Pro VS Code extensions found stealing wallets and credentials

Source headline: Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

Threat level Critical
Signal strength 80/100
Source confidence 1 source
Published 3 hours ago

Intelligence Summary

Security researchers report that a malicious VS Code extension called Solidity Pro can steal sensitive information. The extension is associated with harvesting browser wallet data, API keys, and other credentials. It has been observed distributing a wallet and credential stealing component. Affected users are those who installed the extension from third-party sources or earlier availability channels. Even if the extension is no longer listed on Open VSX, systems already infected may require investigation and remediation. Users should uninstall the extension and rotate potentially exposed secrets immediately.

Recommended Action

Prioritize immediate review, validate exposure, and patch or mitigate affected systems.

Topics

#supply-chain #api-keys #extension #credential-stealing #vscode #wallet-theft
Original reporting The Hacker News Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Open original source

Related Pulse Signals

View all signals
Medium · Cybersecurity Microsoft Edge ends Manifest V2 support, cutting off uBlock Origin-style extensions High · Cybersecurity Microsoft 365 AitM phishing takes over accounts to harvest payroll emails High · Cloud Swiss federal IT office reports SharePoint breach impacting ~200 accounts High · Developer Tools XCSSET malware variant abuses compromised Xcode projects and GitHub