The cline-ai-main.cline-ai-agent extension for VSCode is identified as malicious. Upon installation, it executes an information-stealing payload that exfiltrates sensitive user data, including credentials and cryptocurrency wallets. Additionally, it grants remote access to attackers and attempts to propagate itself to other systems.