
Introduction Modern software engineering has shifted toward a highly customized experience where Integrated Development Environments, or IDEs, serve as the central hub for nearly every task. Extensions for Visual Studio Code and similar platforms allow developers to preview code, run scripts, and collaborate in real-time. However, this reliance on external contributions has created a massive, unvetted attack surface. Because these










