BlockBeats News, April 21st. SlowMist Chief Security Officer 23pds issued a warning to developers through a retweet of X platform user @mrdotparasyte's post, emphasizing the need for increased vigilance when installing third-party plugins or packages.
Currently, there is a suspicious VSCode plugin named JuanFranBlanco.solidit-vscode, with the term "solidit" in the plugin's Identifier being an obvious spelling mistake. This plugin has been in existence for two to three days, and it is currently unclear how many developers may have inadvertently fallen victim. Supply chain attacks targeting developers are becoming increasingly common, especially in the case of unofficially reviewed VSCode plugins, npm packages, etc., making them prime targets for such attacks.
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.