SlowMist: Malicious TRAE Extension Implants On-chain Backdoor, Attackers Can Dynamically Update C2 Configuration