Cybersecurity researchers have flagged a new malicious Microsoft Visual Studio Code (VS Code) extension for Moltbot (formerly Clawdbot) on the official Extension Marketplace that claims to be a free artificial intelligence (AI) coding assistant, but stealthily drops a malicious payload on compromised hosts.
The extension, named „ClawdBot Agent – AI Coding Assistant“ („clawdbot.clawdbot-agent“)
https://thehackernews.com/2026/01/fake-moltbot-ai-coding-assistant-on-vs.html