1 story taggedSolidity.
Two look-alike extensions posed as tools for Ethereum developers, then quietly installed wallet and password stealers on the machines that trusted them.