Nov 82025 Vibe-Coded Malicious VS Code Extension Found with Built-In Ransomware Capabilities AI-created VS Code malware and fake npm packages reveal how attackers exploit open-source trust.