Hacker Noon
Fake Google Update Extension Turns VS Code Into a Malware Delivery Tool | HackerNoon
How a fake Google Update Support extension installs its components and runs the editor’s own Electron binary as a Node interpreter.