GlassWorm campaign used 72 malicious Open VSX extensions and infected 151 GitHub repositories, enabling stealth supply-chain attacks on developers.
One IDE to rule them all. You won't want to use anything else.
You also get to escape Microsoft telemetry tracking too.