Visual Studio Code extensions have been identified exploiting a loophole that allows reuse of names from removed packages ...

VS Code flaw lets attackers reuse deleted extension names, enabling ransomware payload delivery and supply chain risks.