Malicious Microsoft VSCode AI extensions might have hit over 1.5 million users

Two VSCode extensions exfiltrated sensitive user data to Chinese servers ChatGPT – 中文版 and ChatMoss had over 1. 5 million installs combined Extensions used hidden iframes, commands, and SDKs to steal files and track…