安装了超过 900 万的 VScode 插件插件 Material Theme 存在恶意行为，已被下架

[ladypxy]

https://news.ycombinator.com/item?id=43178831

昨天就发现中招了，从 VScode 中无法正常卸载。 需要关闭 VScode 到外面手动删除

cd ~/.vscode/extensions

rm -rf equinusocio.vsc-*

然后编辑 extensions.json 删除包含 equinusocio 的字段

{ "identifier": { "id": "equinusocio.vsc-material-theme", "uuid": "dffaf5a1-2219-434b-9d87-cb586fd59260" }, "version": "34.7.9", "location": { "$mid": 1, "path": "/home/ateveraz/.vscode/extensions/equinusocio.vsc-material-theme-34.7.9", "scheme": "file" }, "relativeLocation": "equinusocio.vsc-material-theme-34.7.9", "metadata": { "installedTimestamp": 1739712853055, "source": "gallery", "id": "45bfc9eb-5e03-487f-bffe-315fa6881d6a", "publisherId": "3b9d55d2-da9e-415a-9bea-8d6bc07147d8", "publisherDisplayName": "Equinusocio", "targetPlatform": "undefined", "updated": false, "isPreReleaseVersion": false, "hasPreReleaseVersion": false } }