128M Downloads: Four VSCode Extension Vulnerabilities OX Security announced four new CVEs on VSCode extensions February 17, 2026. These four extensions had been downloaded 128M times.