Fake Open VSX Extensions Harvest Private Repo and CI Data

77 counterfeit Open VSX extensions beaconed to one domain, 19 harvesting git and CI identity