A Trusted VS Code Extension Helped Breach GitHub. That Should Worry Every Developer.

I install editor extensions without thinking too much about them. Most developers do. We check whether the publisher looks legitimate…