Security researchers have uncovered serious vulnerabilities in four widely used Visual Studio Code extensions, putting over 128 million downloads at risk. These flaws could allow attackers to steal files, execute malicious code remotely, or probe local networks. The findings highlight how even trusted tools can harbor hidden dangers, especially when they run with broad access










