Seventy-seven malicious extensions on the Open VSX marketplace impersonated legitimate developer tools while secretly collecting sensitive information about developers' systems and development environments. You should immediately audit any Open VSX extens
Read the full article: https://www.bleepingcomputer.com/news/security/77-open-vsx-extensions-found-harvesting-developer-info/