The TretinV3.forts-api-extention Visual Studio Code extension (version 0.3.1) is identified as malicious. Upon installation, it executes an information-stealing payload that exfiltrates sensitive user data, including credentials and cryptocurrency wallets. Additionally, the extension enables remote access to the infected system and attempts to propagate itself to other environments.