Security experts have discovered a group of harmful extensions in the Visual Studio Code (VSCode) marketplace that are targeting software developers and cryptocurrency enthusiasts with sophisticated attacks designed to compromise their systems and steal sensitive data. The attackers have created their extensions to appear legitimate by using fake reviews, linking to reputable repositories, and inflating download counts. Investigations have shown that this malicious activity is part of a larger campaign aimed at developers working in blockchain and cryptocurrency environments. Malicious VSCode extensions can pose a direct threat to users storing cryptocurrency on desktop wallets by logging keystrokes, intercepting clipboard activity, and injecting phishing-style prompts. It is crucial for users to be aware of these risks and take necessary precautions to safeguard their cryptocurrency.