A poisoned VS Code extension led to a GitHub breach, and Microsoft owns every link in the chain
…VS Code extensions run in an extension host with the same permissions as VS Code itself , which means it can read and write your files, make network requests, and spawn processes. There…
