A malicious extension was published on Microsoft ’s official VS Code marketplace, and was able to remain there for some time ...