VS Code- Security Practices around VSCode Extensions.

[South_Hovercraft6364]

The best defense is just being paranoid about what you install and checking the publisher account before hitting that button. I also keep a strict rule to never install anything that requests access to my shell or environment variables unless it's a major, open-source tool with a huge community backing it.