Comment by ryanmccullagh

Finally. VScode is a landing zone for malicious extensions.