VS Code flaw lets attackers reuse deleted extension names, enabling ransomware payload delivery and supply chain risks.

Visual Studio Code extensions have been identified exploiting a loophole that allows reuse of names from removed packages ...

But let's be real, it's hard not to feel that Bethesda would be making a lot more noise about Starfield if it had gone down ...