Tag: Solidity Language fake extension

What is the real risk behind malicious VSCode extensions like the Cursor IDE incident?

In July 2026, a Russian crypto developer lost $500,000 due to a malicious “Solidity Language” extension in the Cursor AI IDE. This fake extension used PowerShell scripts to install remote access tools like Quasar RAT ...