Detecting New VSCode Extensions

The Problem Do developers at your organization utilize VSCode and have free rein to do whatever they want? Then this article is for you! With the recent uptick in supply chain attacks targeting VSCode extensions 1 , I decided to figure out how to baseline and detect new extension installations. Detection VSCode extensions are typically installed in the user's directory located at…