Security News Malicious VSX Extension "SleepyDuck" Uses Ethereum to Keep Its Command Server Alive TheHackerNews Daniel Bender 03 Nov 2025 Researchers uncover SleepyDuck RAT hidden in VSX extension, using Ethereum contracts to control infected hosts.