When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
Microsofthas pulled two popular VSCode extensions from its marketplace after findingmalicious codehiding inside.
Our security researchers at Microsoft confirmed this claims and found additional suspicious code."
For clarity - the removal had nothing to do about copyright/licenses, only about potential malicious intent."
Removing the old dependency was a quick 30-second fix, but it seems that’s just how Microsoft operates.
We also ship an obfuscated index.js file that contains all the theme commands and logic.