Malicious pull request infects VS Code extension

https://www.securitricks.com/attackreports/malicious-pull-request-infects-vs-code-extension