BlockBeats News, April 21st. SlowMist Chief Security Officer 23pds issued a warning to developers through a retweet of X platform user @mrdotparasyte's post, emphasizing the need for increased vigilance when installing third-party plugins or packages.

Currently, there is a suspicious VSCode plugin named JuanFranBlanco.solidit-vscode, with the term "solidit" in the plugin's Identifier being an obvious spelling mistake. This plugin has been in existence for two to three days, and it is currently unclear how many developers may have inadvertently fallen victim. Supply chain attacks targeting developers are becoming increasingly common, especially in the case of unofficially reviewed VSCode plugins, npm packages, etc., making them prime targets for such attacks.