Malicious pull request infects VS Code extension

https://www.securitricks.com/reports/malicious-pull-request-infects-vs-code-extension/