Malicious code embedded in Visual Studio Code extensions is actively stealing GitHub/Open VSX credentials and cryptocurrency wallet data, impacting thousands of users. Here’s how to detect, remediate, and protect developer environments.