Dec 102025 Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.