For more than a year, a self-propagating worm rode VS Code extensions, npm packages, and stolen developer credentials through ...
Somewhere inside GitHub, a developer installed a Visual Studio Code extension. It looked like any other productivity plugin ...