Benign add-ons can be weaponized with malicious updates after gaining user trust.
Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...