
Unmasking “SleepyDuck”: The Malicious VSX Extension Leveraging Ethereum for Command Server Resilience
Cybersecurity researchers have identified a new malicious extension in the Open VSX registry that is associated with a remote access trojan known as SleepyDuck. This extension, named juan-bianco.solidity-vlang (version 0.0.7), was initially released on October 31, 2025, and was later




