There isn’t a consistent threat model for extension marketplaces yet, McCarthy said, making it difficult for any platform to ...
Security researchers found malicious code hiding in two VSCode extensions Microsoft quickly pulled them and notifies users ...