Show HN: VSCan - Detect Malicious VSCode Extensions
Did you know that VSCode extensions run with full access to your system—including file system, network, and credentials? Worse, dozens of malicious extensions have already made it into the marketplace, silently compromising devices.I am a security researcher and student developer who ran into this problem myself. To help tackle this, I built a 100% free tool