Malicious Microsoft VSCode Extensions Steal Passwords, Open Remote Shells

According to Check Point, whose analysts discovered the malicious extensions and reported them to Microsoft, the malware enabled the threat actors to steal credentials, system information, and establish a remote shell on the victim's machine.