Tell HN: A fake, highly obfuscated Solidity VSCode plugin found on marketplace

5 navad 1 7/5/2025, 7:54:08 PM

While setting up a new dev machine today, we noticed that there's a new plugin, listed 3 days ago with more than 2M (fake?) downloads on the MS VSCode Marketplace [0] and OpenVSX [1].

Reverse engineering is still in progress but you probably want to make sure that you don't have this plugin installed and running.

[0] https://marketplace.visualstudio.com/items?itemName=AhmedCrypto.ahmedcrypto1

[1] https://open-vsx.org/extension/juanbIanco/solibidity

Comments (1)

mtmail · 44m ago

Looks like a clone of https://marketplace.visualstudio.com/items?itemName=JuanBlan... (1.3M downloads, 10 years old). So question is how they possibly faked the 2M downloads.

The Fed says this is a cube of $1M. They're off by half a million (calvin.sh)

More on Apple's Trust-Eroding 'F1 the Movie' Wallet Ad (daringfireball.net)

The new skill in AI is not prompting, it's context engineering (philschmid.de)

My open source project was relicensed by a YC company [license updated] (twitter.com)

Nvidia won, we all lost (blog.sebin-nyshkim.net)

Introducing tmux-rs (richardscollin.github.io)

Writing Code Was Never the Bottleneck (ordep.dev)

I made my VM think it has a CPU fan (wbenny.github.io)

Xfinity using WiFi signals in your house to detect motion (xfinity.com)

Proton joins suit against Apple for practices that harm developers and consumers (proton.me)

Being too ambitious is a clever form of self-sabotage (maalvika.substack.com)

The Rise of Whatever (eev.ee)

Websites hosting major US climate reports taken down (apnews.com)

Exploiting the IKKO Activebuds “AI powered” earbuds (2024) (blog.mgdproductions.com)

Cloudflare to introduce pay-per-crawl for AI bots (blog.cloudflare.com)

Figma files for proposed IPO (figma.com)

Don’t use “click here” as link text (2001) (w3.org)

Private sector lost 33k jobs, badly missing expectations of 100k increase (cnbc.com)

ICEBlock, an app for anonymously reporting ICE sightings, goes viral (techcrunch.com)

There are no new ideas in AI, only new datasets (blog.jxmo.io)

YouTube No Translation (addons.mozilla.org)

Major reversal in ocean circulation detected in the Southern Ocean (icm.csic.es)

Local-first software (2019) (inkandswitch.com)

Ask HN: What Are You Working On? (June 2025)

Gridfinity: The modular, open-source grid storage system (gridfinity.xyz)

Cloudflare Introduces Default Blocking of A.I. Data Scrapers (nytimes.com)

Show HN: Spegel, a Terminal Browser That Uses LLMs to Rewrite Webpages (simedw.com)

Mini NASes marry NVMe to Intel's efficient chip (jeffgeerling.com)

Show HN: CSS generator for a high-def glass effect (glass3d.dev)

Many ransomware strains will abort if they detect a Russian keyboard installed (2021) (krebsonsecurity.com)

I'm dialing back my LLM usage (zed.dev)

I write type-safe generic data structures in C (danielchasehooper.com)

Fakespot shuts down today after 9 years of detecting fake product reviews (blog.truestar.pro)

Melbourne man discovers extensive model train network underneath house (sbs.com.au)

OBBB signed: Reinstates immediate expensing for U.S.-based R&D (kbkg.com)

Claude Code now supports hooks (docs.anthropic.com)

ICEBlock climbs to the top of the App Store charts after officials slam it (engadget.com)

OpenFLOW – Quickly make beautiful infrastructure diagrams local to your machine (github.com)

Show HN: Octelium – FOSS Alternative to Teleport, Cloudflare, Tailscale, Ngrok (github.com)

Why I left my tech job to work on chronic pain (sailhealth.substack.com)

Gene therapy restored hearing in deaf patients (news.ki.se)

Sam Altman Slams Meta’s AI Talent Poaching: 'Missionaries Will Beat Mercenaries' (wired.com)

Larry (cat) (en.wikipedia.org)

Opening up ‘Zero-Knowledge Proof’ technology (blog.google)

Huawei releases an open weight model trained on Huawei Ascend GPUs (arxiv.org)

Flounder Mode – Kevin Kelly on a different way to do great work (joincolossus.com)

The $25k car is going extinct? (media.hubspot.com)

That XOR Trick (2020) (florian.github.io)

AI note takers are flooding Zoom calls as workers opt to skip meetings (washingtonpost.com)

Loss of key US satellite data could send hurricane forecasting back 'decades' (theguardian.com)

Tell HN: A fake, highly obfuscated Solidity VSCode plugin found on marketplace

Comments (1)