VS Code extensions can supercharge your workflow, but they also run with your user permissions—meaning a single malicious extension with a hidden backdoor can wreak serious havoc. If you’re a developer or security-conscious user, knowing how to detec…