Oh look, another slop filled release.

And since they've been hacked by a vsc extension, have they committed to fixing their broken extension permission model?

No, they just delayed extension updates by two hours.

So now they'll just be hacked two hours later...

Face meet palm