According to Rxliuli, who published the code on GitHub, Apple deployed the interface with sourcemaps active, which made it ...

A suspicious Visual Studio Code extension with file-encrypting and data-stealing behavior successfully bypassed marketplace ...