Comment by throwa356262

Pro tip: In vscode, you can specify which plugin publishers are allowed.

You can set this to only allow plugins from Microsoft, which is a company most people trust and also owns Github.

Oh wait...