77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development environments where they were installed. [...]
77 Open VSX extensions found harvesting developer info
Summary + source link. No paywalls, no tracking.