Malicious Extensions

Hundreds of Secrets Found in VS Code Extensions as Microsoft Blocks Leaky Uploads

Leaked publisher tokens could let attackers push malicious updates to entire install bases across fragmented extension registries.