I caught this suspicious process running under VS Code:<p><pre><code> /usr/bin/ps -ax -o pid=,ppid=,pcpu=,pmem=,command=
</code></pre>
I expected a rogue extension was responsible. Rather, the spyware ships with VS Code in this commit:<p><a href="https://github.com/microsoft/vscode/commit/307987fe383950b8fa50c150f7d345e353a8544b">https://github.com/microsoft/vscode/commit/307987fe383950b8f...</a><p>Screenshot of the running process:
<a href="https://pbs.twimg.com/media/FrSfjwtWYAE02hC?format=jpg&name=large" rel="nofollow">https://pbs.twimg.com/media/FrSfjwtWYAE02hC?format=jpg&name=...</a>