[cechmaster]

You are safe. The way this hack works is that someone online would contact you, share a obsidian valut with you, you open the vault, you download & install a plugin the hacker tells you to install to open the vault. It's all described in the article if you would like to read it.

[Daedren]

The obsidian vault is to already have the chosen plugin pre-selected and is part of the social engineering effort, that's not the main problem.

The issue is that this could happen to anyone who just searches the malicious plugin's name and installs it. Worse if it's a popular one that gets compromised.