VS Code extensions run with your permissions while installs and badges are weak trust signals. Learn how to audit, pin, allowlist, and contain them.
Research topic
Extensions
1 ack3 research article about Extensions, with linked authors, definitions, and primary technical context.