AI and Tech Summaries - AI Weekly Malaysia

Summaries

Short AI and tech summaries with source links, signal scores, and why each update matters for builders, founders, and Malaysian tech workers.

Window

Today Yesterday This week Last week This month Last month All time

Showing 1-1 of 1 results

Date	Provider	Score	Summary
10 Aug 2026, 3:38 PM	The Hacker News	6.5	Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials Two malicious VS Code extensions ('helper-beeps.solidity-pro' and 'web3devtoolsx.solidity-pro') were found delivering an information stealer targeting Solidity/Web3 developers. Versions 1.0.0–2.4.x beaconed to Cloudflare Workers for encrypted Python payloads; v3.0.0+ became a full stealer harvesting GitHub/GitLab tokens, AWS keys, Cloudflare tokens, OpenAI API keys, Telegram bot tokens, crypto wallet vaults, SSH keys, and 1Password MFA tokens, exfiltrating via Telegram bot upload. The malware uses obfuscation, clean intermediate versions to build trust, and randomized delayed activation hours or days after installation to evade sandbox scanning. Why: If you develop in VS Code with community extensions—especially Web3 or Solidity tooling—audit installed extensions now and revoke any GitHub, GitLab, AWS, Cloudflare, OpenAI, or Telegram bot tokens that may have been exposed. The delayed activation means a recently installed extension that seemed fine for days could still be malicious; remove anything matching 'solidity-pro' and rotate credentials proactively. security vs-code-extensions supply-chain-attack web3 credential-theft

Date

Provider

Score

Summary

10 Aug 2026, 3:38 PM

The Hacker News

6.5

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

Two malicious VS Code extensions ('helper-beeps.solidity-pro' and 'web3devtoolsx.solidity-pro') were found delivering an information stealer targeting Solidity/Web3 developers. Versions 1.0.0–2.4.x beaconed to Cloudflare Workers for encrypted Python payloads; v3.0.0+ became a full stealer harvesting GitHub/GitLab tokens, AWS keys, Cloudflare tokens, OpenAI API keys, Telegram bot tokens, crypto wallet vaults, SSH keys, and 1Password MFA tokens, exfiltrating via Telegram bot upload. The malware uses obfuscation, clean intermediate versions to build trust, and randomized delayed activation hours or days after installation to evade sandbox scanning.

Why: If you develop in VS Code with community extensions—especially Web3 or Solidity tooling—audit installed extensions now and revoke any GitHub, GitLab, AWS, Cloudflare, OpenAI, or Telegram bot tokens that may have been exposed. The delayed activation means a recently installed extension that seemed fine for days could still be malicious; remove anything matching 'solidity-pro' and rotate credentials proactively.