The codejoy.codejoy-vscode-extension versions 1.8.3 and 1.8.4 are malicious. Upon installation, the extension executes an information stealer that exfiltrates user data, including credentials and cryptocurrency wallets. It also provides remote access to attackers and attempts to propagate itself to other systems.