https://howtonotcode.com/story/1086-fake-windsurf-extension-steals-developer-credentials-via-solana-hosted-payloads