Fake Extension Ring Turns a Developer Marketplace Into a Quiet Reconnaissance Channel

Seventy-seven lookalike Open VSX packages show how trusted add-ons can become a low-friction way to collect environment intelligence from developer machines.