GuardDog is a CLI tool that allows to identify malicious PyPI and npm packages, Go modules, GitHub actions, or VSCode extensions. It runs a set of heuristics on the package source code (through ...
Fortunately, Visual Studio Code has a little terminal you can use to run commands without needing to swap between windows.