The attacks stemmed from a GitHub account that was also compromised in a previous Miasma attack on Microsoft last month.
VS Code 1.123 adds a two-hour delay before extensions auto-update to newer versions when automatic updates are enabled.
Malicious programs are constantly finding new ways to harm or damage devices. Seeing these things, it would always be reasonable to get apps in the Appx file format that is used by Universal Windows ...