Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks
VS Code users are advised to limit the number of installed extensions, scrutinize extensions prior to downloading them, and weigh the pros and cons of enabling auto-updates
This is the approach I’ve been taking and being more selective with what I install in general. This also applies to browser extensions.