Does anything actually scan a VS Code extension before you install it, not just check the publisher name?
Saw the thing about backdoored Claude extensions on the Cursor marketplace and went and checked what I've got installed. No idea what half of them actually do under the hood, I just saw good ratings and installed. We don't have a security team at my company, it's me and two other devs.
Looking for something that actually opens up the code and flags sketchy behavior before it's sitting in my editor with access to everything. Any recs?
Anonymous Fossa,