# Env File · Drain Watch

1 incidents, 0 live. JSON: https://drains.watch/t/env-file.json · RSS: https://drains.watch/t/env-file/feed.xml

- [Malicious 'contractshark.solidity-lang' Cursor extension steals an Ethereum core developer's private key](https://drains.watch/i/cursor-contractshark-solidity-extension-dev-key-theft-aug-2025) (closed, Medium, Partly contained, since Aug 13, 2025)