[what we believe to be a malicious extension from the VSCode marketplace](https://app.extensiontotal.com/report/498.pythonformat) (that was removed from there a few months back) pop up on [open-vsx.org](http://open-vsx.org/). Its ID appears in the VSCode control url at [https://main.vscode-cdn.net/extensions/marketplace.json ](https://main.vscode-cdn.net/extensions/marketplace.json) Location in the Open VSX marketplace is: https://open-vsx.org/extension/498/pythonformat