Tootfinder

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro ("solidity-pro") that has been observed delivering a browser wallet and credential stealer.
🧑‍💻 https://

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Malicious Solidity Pro VS Code extensions steal crypto wallets, API keys, SSH keys, and developer tokens, then exfiltrate the data via Telegram.

A US judge dismisses two lawsuits against LinkedIn over its scanning of browser extensions, saying users voluntarily expose data by downloading extensions (Jon Brodkin/Ars Technica)
https://arstechnica.com/tech-policy/202…

LinkedIn beats "BrowserGate" lawsuits over scanning users' Chrome extensions
Judge tosses lawsuits, says plaintiffs didn't allege any real privacy violation.

I'm pretty happy with how bookmarks turned out in @…. Next up, getting the Chrome, Safari, and Firefox extensions submitted and approved for one-click bookmark note creation.

🔧 Ships as a language server (harper-ls), a JavaScript library, a Rust crate, browser extensions and editor plugins: VS Code, Neovim, Zed, Obsidian, WordPress block editor, Chrome, Firefox and a macOS desktop app that works in every text field system-wide.

RE: #cybersecurity at a company and use Intune to manage your desktop/laptop fleet, propose a project for next year to start managing browser extensions. It’s a fair amount of work to get started, but once under management you can put in place processes for your help desk to handle requests for unallowed extensions.
https://msendpointmgr.com/2025/10/04/taming-browser-extensions-with-intune/