A published VS Code extension didn't hide the fact that it encrypts and exfiltrates data and also failed to remove obvious signs it was AI-generated.

At its core, VS Code is built on an open source project called Code OSS, published under the permissive MIT license. Microsoft maintains this repository publicly on GitHub, where anyone can clone, ...