An advanced malware campaign on the npm registry steals the very keys that control enterprise cloud infrastructure.
At its core, VS Code is built on an open source project called Code OSS, published under the permissive MIT license.