Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro ("solidity-pro") that has been observed delivering a browser wallet and credential stealer.

The names of the extensions are below -


helper-beeps.solidity-pro
web3devtoolsx.solidity-pro

Although neither of the extensions is now available on Open VSX, the GitHub repository



Source: TheHackerNews
Source Link: https://thehackernews.com/2026/08/solidity-pro-vs-code-extensions-steal.html