MaliciousCorgi: AI Extensions send your code to China

Malicious VS Code AI Extensions Harvesting Code from 1.5M Devs

Two popular AI coding extensions with 1.5M installs secretly harvest your entire codebase and profile you. Both are still live in the marketplace.