Interesting that anyone can upload extensions there without them getting flagged

Which crypto assets did it target? or was it taking private keys

Yikes. Everyone who uses VSCode or its variants should be at least a little freaked out here ...