StepSecurity's analysis reveals a significant supply chain attack targeting Solidity developers through compromised Visual Studio Code (VSCode) extensions published by IoliteLabs. The affected extensions—solidity-macos, solidity-windows, and solidity-linux, were abruptly updated to version 0.1.8 on March 25, 2026, after being dormant since 2018. Each extension contains a multi-stage backdoor that silently activates on every startup of VSCode, downloading platform-specific payloads from attacker-controlled domains.