The Duck Song, now delivering malware. Knostic's AgentMesh discovered five malicious VS Code extensions impersonating Solidity and Hardhat tooling. https://www.knostic.ai/blog/the-duck-song-malicious-solidity-extensions-hide-a-cross-platform-payload-in-an-mp4