[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"focus:solidity-pro-vs-code-extensions-steal-crypto-wallets-api-keys-and-credentials-msn6r3vt":3},{"item":4},{"id":5,"title":6,"slug":7,"summary":8,"severity":9,"category":10,"cve_ids":11,"affected_products":12,"action_required":17,"article_ids":18,"ioc_summary":20,"source_urls":21,"status":23,"expires_at":24,"created_at":25,"updated_at":26,"articles":27},"84e22394-f611-453d-a151-aaeec5765316","Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials","solidity-pro-vs-code-extensions-steal-crypto-wallets-api-keys-and-credentials-msn6r3vt","Malicious VS Code extensions named 'Solidity Pro' are stealing crypto wallets, API keys, and credentials from developers. The malware uses obfuscation and delayed activation to avoid detection, exfiltrating data via Telegram. Any developer who installed these extensions has exposed sensitive credentials and should be treated as compromised.","critical","advisory",[],[13,14,15,16],"Solidity Pro","Visual Studio Code","Microsoft","Lumma Stealer","Immediately audit all developer workstations for installed Solidity Pro extensions. Force uninstall, reset all API keys and crypto wallet credentials, and scan endpoint activity logs for data exfiltration to Telegram IPs\u002Fdomains.",[19],"2309062b-497b-4b4d-b842-a143083666e6",null,[22],"https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fsolidity-pro-vs-code-extensions-steal.html","archived","2026-08-12T12:06:11.785+00:00","2026-08-10T12:06:20.072953+00:00","2026-08-12T13:05:48.43809+00:00",[28],{"id":19,"title":6,"url":22}]