At its core, the Material Icon Theme replaces VS Code’s default file and folder icons with visually appealing, color icons ...

Once the QR code has been scanned and has become active, malicious JavaScript can then simulate login portals, exfiltrate data via hidden forms and fingerprint devices for further exploitation.