It's more than just a code editor.
Latest VS Code update introduces prepackaged bundles of chat customizations that can include skills, commands, agents, MCP servers, and hooks.
Dubbed InstallFix by Push Security, the scheme inserts instructions to download malware during the Claude Code install process on cloned websites.