SlowMist warns of a malicious GitHub repo "sol-live" disguised as a Solidity study tool, hiding a download-and-execute command in .vscode/settings.json.