VS Code 1.123 adds a two-hour delay before extensions auto-update to newer versions when automatic updates are enabled.
Over 100 NPM and PyPI packages were injected with malicious code in the Miasma and Hades Shai-Hulud supply chain attack ...
The only operating cost is electricity.