Introducing Socket Scanning for VS Code Marketplace Extensions

If 2026 has shown us anything, it’s that the software supply chain doesn’t stop at the dependencies in your apps. It includes the tools your developers use to write, build, and ship code. VS Code extensions run inside an environment full of source code, credentials, and access to company infrastructure.