Add extension to malicious list

[janbro]

• I have read the note above about PRs contributing or fixing extensions
• I have tried reaching out to the extension maintainers about publishing this extension to Open VSX (if not, please create an issue in the extension's repo using this template).
• This extension has an OSI-approved OSS license (we don't accept proprietary extensions in this repository)

Description

Add NomcFoundation.hardhat-solidity to the list of malicious extensions

File: Optimizer.js
Summary: Malicious
Findings:

• C2 communication via obfuscated domain (XOR decryption of fixed buffer)
• Executes arbitrary code on Windows (werfault.exe -u -p) and macOS (temporary bundle)

Justification: The file performs unauthorized system-level code execution and sends user data to a command and control server using obfuscated domain generation. These behaviors are inconsistent with legitimate Hardhat Solidity extensions and match known malware patterns for data exfiltration and system compromise.
Risk Assessment: High likelihood of malicious activity (95%); critical severity due to direct system manipulation.

Found by: DevGuard