A malicious extension was published on Microsoft’s official VS Code marketplace, and was able to remain there for some time ...