Visual Studio Code extensions have been identified exploiting a loophole that allows reuse of names from removed packages ...