Security News Malicious VSX Extension "SleepyDuck" Uses Ethereum to Keep Its Command Server Alive TheHackerNews Daniel Bender 03 Nov 2025 Share Researchers uncover SleepyDuck RAT hidden in VSX extension, using Ethereum contracts to control infected hosts.