@GossiTheDog With "also", do you know whether it affects the marketplace.visualstudio.com release? The advisory you linked to mentions OpenVSX only.