Malicious Solidity Pro VS Code extensions steal crypto wallets, API keys, SSH keys, and developer tokens, then exfiltrate the ...
A UK AISI test found an AI agent created fake identities and tried to plant malicious code in a real open-source software project.