SleepyDuck

Entity category: PRODUCT

Malicious Solidity VSCode Extension Backdoors Developers

November 5, 2025

Silhouette of a hooded figure holding a red cube, with fragments exploding outwards.

SleepyDuck malware disguised as a Solidity extension in the Open VSX registry has been downloaded over 53,000 times, targeting developers…