ExtensionTotal says it reported the malicious extensions to Microsoft, but they are still available at the time of writing. The Discord-themed extension on VSCode Marketplace Source: BleepingComputer ...

"VSCode extensions are an abused and exposed attack vertical, with zero visibility, high impact, and high risk. This issue poses a direct threat to organizations and deserves the security ...

Microsoft has pulled two popular VSCode extensions from its marketplace after finding malicious code hiding inside. However, the original developers don’t seem to be the culprits, and have ...