告诉 HN： 市场上发现一个伪造的、高度混淆的 Solidity VSCode 插件
1 分•作者: navad•7 个月前
今天在搭建新的开发机器时，我们注意到一个新插件，它于 3 天前发布，在 MS VSCode 市场 [0] 和 OpenVSX [1] 上的下载量超过了 200 万（疑似虚假）次。<p>虽然逆向工程仍在进行中，但您可能需要确保自己没有安装和运行此插件。<p>[0] https://marketplace.visualstudio.com/items?itemName=AhmedCrypto.ahmedcrypto1<p>[1] https://open-vsx.org/extension/juanbIanco/solibidity
查看原文
While setting up a new dev machine today, we noticed that there's a new plugin, listed 3 days ago with more than 2M (fake?) downloads on the MS VSCode Marketplace [0] and OpenVSX [1].<p>While reverse engineering still in progress, you probably want to make sure that you don't have this plugin installed and running.<p>[0] https://marketplace.visualstudio.com/items?itemName=AhmedCrypto.ahmedcrypto1<p>[1] https://open-vsx.org/extension/juanbIanco/solibidity