How installing a fake extension from Open VSX led to cryptocurrency theft

This is a story of how a blockchain developer lost US$500 000 to a fake Solidity extension from the Open VSX marketplace.