How trustworthy are the extensions you get in your editor or IDE? I'd expect most marketplaces to not be well harmed against such attacks.

More elements on why we should all be concerned about Visual Studio Code and the state of development tools overall. It's clearly moving more and more proprietary. Visual Studio Code's ecosystem is a very well designed trap. I see it more and more around me (even tried it for a little while to see what it was all about). What can I say... Go Kate Go! And also we clearly need many more LSP servers.

The obvious problem with VS Code, you just cannot have any trust into it.

Looks like a very interesting extensions to help people get into a codebase or to record tutorials.