“Microsoft removed both extensions from the VS Code marketplace and banned the developer.”
Microsoft pulled two Material Theme extensions with about 9 million installs and banned the developer. Researchers flagged obfuscated JavaScript in the release notes code. The developer says it came from a 2016 dependency and that Microsoft never contacted him. Millions of editors lost their theme before anyone talked to the author.