Tell HN: A fake, highly obfuscated Solidity VSCode plugin found on marketplace

[navad]

While setting up a new dev machine today, we noticed that there's a new plugin, listed 3 days ago with more than 2M (fake?) downloads on the MS VSCode Marketplace [0] and OpenVSX [1].

Reverse engineering is still in progress but you probably want to make sure that you don't have this plugin installed and running.

[0] https://marketplace.visualstudio.com/items?itemName=AhmedCrypto.ahmedcrypto1

[1] https://open-vsx.org/extension/juanbIanco/solibidity

[mtmail]

Looks like a clone of https://marketplace.visualstudio.com/items?itemName=JuanBlan... (1.3M downloads, 10 years old). So question is how they possibly faked the 2M downloads.