Microsoft's two hour auto update delay for VS Code extensions gives the community a window to catch malicious releases before…