In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...
A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.