---
_-= Per source details. Do not edit below this line.=-_
## Source: google-open-source-security (a765300393215437d2a27fb270964dc0a9d7d521b48fa9a541af8445f4f67be9)
This extension is malicious. When installed it runs an info stealer that
exfiltrates user data including credentials and cryptocurrency wallets. The
extension also provides remote access and attempts to propagate itself.
---
_-= Per source details. Do not edit below this line.=-_
## Source: google-open-source-security (2249e8ad553f2a774e7f7e3418d19c033832fcdd1253c29e8bdb92427cb55644)
This extension is malicious. When installed it runs an info stealer that
exfiltrates user data including credentials and cryptocurrency wallets. The
extension also provides remote access and attempts to propagate itself.
---
_-= Per source details. Do not edit below this line.=-_
## Source: google-open-source-security (8174c373fd818eb48388777436e30f84dcf0846593fcbddc3e73f898858a4317)
This extension is malicious. When installed it runs an info stealer that
exfiltrates user data including credentials and cryptocurrency wallets. The
extension also provides remote access and attempts to propagate itself.
---
_-= Per source details. Do not edit below this line.=-_
## Source: google-open-source-security (a30acc5c978ef579bc01603521f705b16016df5a2e72e44e1c0f3222ff2e6068)
This extension is malicious. When installed it runs an info stealer that
exfiltrates user data including credentials and cryptocurrency wallets. The
extension also provides remote access and attempts to propagate itself.
---
_-= Per source details. Do not edit below this line.=-_
## Source: google-open-source-security (dc07b5a9c4c6f86929db6d62c15f2c2a9c52912263950282c709e0b68387f54b)
This extension is malicious. When installed it runs an info stealer that
exfiltrates user data including credentials and cryptocurrency wallets. The
extension also provides remote access and attempts to propagate itself.
---
_-= Per source details. Do not edit below this line.=-_
## Source: google-open-source-security (4cd24ae9caaea029653d9b9516f034a9ff19684891421dd3558c584f02076c8f)
This extension is malicious. When installed it runs an info stealer that
exfiltrates user data including credentials and cryptocurrency wallets. The
extension also provides remote access and attempts to propagate itself.
---
_-= Per source details. Do not edit below this line.=-_
## Source: google-open-source-security (1dbdd73bf66fbfde48d73e86ebfbb11ca8bb6f44ff57a5030596fc189f962ddf)
This extension is malicious. When installed it runs an info stealer that
exfiltrates user data including credentials and cryptocurrency wallets. The
extension also provides remote access and attempts to propagate itself.
The jeronimoekerdt.color-picker-universal extension for VSCode is identified as malicious. Upon installation, it executes an information-stealing payload that exfiltrates sensitive user data, including credentials and cryptocurrency wallets. Additionally, the extension provides remote access capabilities and attempts to propagate itself to other systems.
The grrrck.positron-plus-1-e extension for VSCode, version 0.0.71, is identified as malicious. Upon installation, it executes an information-stealing payload that exfiltrates sensitive user data, including credentials and cryptocurrency wallets. Additionally, the extension enables remote access and attempts to propagate itself to other systems.
The ginfuru.better-nunjucks extension for VSCode is identified as malicious. Upon installation, it executes an information-stealing payload that exfiltrates sensitive user data, including credentials and cryptocurrency wallets. Additionally, the extension enables remote access to the infected system and attempts to propagate itself to other systems.
The ellacrity.recoil extension for VSCode, version 0.7.4, is identified as malicious. Upon installation, it executes an information-stealing payload that exfiltrates sensitive user data, including credentials and cryptocurrency wallets. Additionally, it provides remote access capabilities and attempts to propagate itself to other systems.
The codejoy.codejoy-vscode-extension versions 1.8.3 and 1.8.4 are malicious. Upon installation, the extension executes an information stealer that exfiltrates user data, including credentials and cryptocurrency wallets. It also provides remote access to attackers and attempts to propagate itself to other systems.
The CodeInKlingon.git-worktree-menu extension for VSCode is identified as malicious. It contains code that steals user information, including credentials and cryptocurrency wallets. The extension also enables remote access to the infected system and attempts to propagate itself to other systems.