https://howtonotcode.com/story/1094-malicious-fake-windsurf-extension-uses-solana-blockchain-for-c2-targets-developer-credentials