Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.
GitHub confirms breach of 3,800 internal repos after employee installs poisoned VS Code extension - SiliconANGLE ...