GitHub undone by a VS Code addon

We must offer a slow clap to GitHub, whose own internal repositories were breached after an employee installed a poisoned VS Code extension. This highly embarrassing intrusion affected 3,800 internal repositories and exposed the soft underbelly of our coding overlords. To protect ourselves from this specific brand of employee-assisted catastrophe, we must somehow stop staff from downloading unverified tools. Good luck convincing developers that their beloved, shiny extensions are actually Trojan horses designed to ruin our entire week.