Malicious helpers: VS Code Extensions observed stealing sensitive information

ReversingLabs researchers identified four malicious VS Code Marketplace extensions (clipboard-helper-vscode, code-ai-assistant, codegpt-helper, mycodegpt-assistant) published by the author 'VSAnalysistest' that collected clipboard data and developer-supplied API/credential values and exfiltrated them to a Discord webhook; the extensions were simple, borrowed from Microsoft tutorial code, had very limited downloads (~50 installs, ~5 downloads), were removed from the marketplace, and the report warns developers about supply-chain risks while providing IOCs and detection guidance.