A remote access trojan dubbed SleepyDuck, and disguised as the well-known Solidity extension in the Open VSX open-source ...
The Eclipse Foundation has resolved the security incident at Open VSX and is introducing new measures to protect developer accounts.