The ginfuru.better-nunjucks extension for VSCode is identified as malicious. Upon installation, it executes an information-stealing payload that exfiltrates sensitive user data, including credentials and cryptocurrency wallets. Additionally, the extension enables remote access to the infected system and attempts to propagate itself to other systems.