Ahhh. Thank you! I reported a vscode extension because I thought it was phishing. In my defence they made zero effort to indicate that it was the official extension.