VS Code 1.123 Adds Two-Hour Extension Update Delay to Limit Supply Chain Attacks
infoq.comai-tools
Starting with VS Code 1.123, shipped June 3, newly published extension versions sit for two hours before auto-update kicks in. The idea is straightforward: if someone compromises an extension maintai… [+4160 chars]