Open VSX Extension Delivers RAT and Stealer via GitHub Downloader

An Open VSX extension used by thousands of developers has been caught silently pulling a full-featured remote access trojan and infostealer from GitHub.