A vulnerability in the extension publishing mechanism of Open VSX could have allowed attackers to tamper with any repository.

Webviews are a powerful way to add custom functionality beyond what the Visual Studio Code API supports. They're fully customizable, which, historically, has meant that the responsibility of ...