VSCode extensions with 9 million installs pulled over security risks

A CLI to quickly launch VSCode/cursor devcontainers

VSCode’s SSH agent is bananas

Chrome Manifest V3 blamed for security risks as EditThisCookie extension becomes a victim | Google removed the EditThisCookie Chrome extension, but this malicious copycat remains