Malicious VSCode Extensions with Millions of Installs Discovered

Researchers found that the malicious code went undetected by endpoint detection and response (EDR) tools, as VSCode is treated leniently due to its nature as a development and testing system.