VS Code extensions are less secure than browser extensions or even NPM packages | Heykuki News