Daniel Miranda

a developer at a workstation is tugged by puppet strings from a large ghostly hand above, while a VS Code extensions screen shows “Solidity” and a “ScreenConnect” tag, suggesting a compromised dev setup.

January 30, 2026
Solidity devs targeted again: Malicious VS Code extension drops ScreenConnect-based remote access trojan (RAT)

November 13, 2025
How we take down malicious Visual Studio Code extensions

$Widescreen graffiti-style cyberpunk illustration showing a dark, gritty wall with a glowing VS Code logo at center, surrounded by fake ‘pro’ extensions like ‘Quarto Pro,’ ‘Profiler PHP Pro,’ and ‘Catppuccin’ painted as corrupted street signs. Neon green and teal dominate the scene, with rough textures, paint splatters, and fractured lines suggesting tampering and impersonation.$

December 5, 2025
Taking Down More Malicious VSCode Extensions in the ‘Prettier’ Campaign