At its core, VS Code is built on an open source project called Code OSS, published under the permissive MIT license.

Researchers have found a malicious backdoor in a compression tool that made its way into widely used Linux distributions, including those from Red Hat and Debian. Because the backdoor was discovered ...