Open VSX bug misread scanner failures as clean results, letting malicious VS Code extensions go live before patch in v0.32.0.
VS Code is perfect for most of us, but let’s not pretend it’s just another open-source tool. The source code is available under the MIT license, but the product you actually download from Microsoft is ...