slow fog: malice track ide extension disguised as solidity plugin

according to slow fog reports, malice track ide extended juannegro.solity disguised as solidity plugin and acted as a cross-platform malicious software deliveryer. the extension will be self-executed and sustained after the ide start, and the dynamic c2 configuration will be stored and acquired using the taifung smart contract, allowing the attackers to update the c2 endpoint and payload without re-dispatch. although the extension has been removed from open vsx, it is still available through the trae marketplace as of 18 july, and installed users should immediately delete and check for damage to the system。