How VS code extensions can be vulnerable?

I recently read an article by Bleeping Computer, about malicious VSCode extensions. It seems that VS Code extensions can be vulnerable in the following ways according to Bleeping Computer: Trivial Fake Extensions: Researchers created a fake extensio...