Nov 42025 Malicious VSX Extension “SleepyDuck” Uses Ethereum to Keep Its Command Server Alive Researchers uncover SleepyDuck RAT hidden in VSX extension, using Ethereum contracts to control infected hosts.