A group of Israeli researchers explored the security of the Visual Studio Code marketplace and managed to "infect" over 100 organizations by trojanizing a copy of the popular 'Dracula Official ...

The VSCode.dev browser client, which uses the CLI and permissions to create a tunnel. I’m using a Debian compute instance on Google Cloud Platform (GCP) but any type and provider will work.