From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.0 required=5.0 tests=ALL_TRUSTED,HK_RANDOM_FROM autolearn=no autolearn_force=no version=3.4.4 Received: (qmail 4006 invoked from network); 8 Dec 2022 10:49:41 -0000 Received: from localhost (HELO inbox.vuxu.org) (::1) by localhost with ESMTPUTF8; 8 Dec 2022 10:49:41 -0000 Content-Type: multipart/mixed; boundary="===============1935427606765685826==" MIME-Version: 1.0 Subject: =?utf8?q?=5BISSUE=5D_vscode_template_is_vulnerable_to_a_supply_chain_attack?= To: ml@inbox.vuxu.org From: crtxcr Reply-to: ml@inbox.vuxu.org Message-ID: Date: Thu, 08 Dec 2022 11:49:41 +0100 List-Id: GitHub notification mails are now in MIME to allow UTF8. --===============1935427606765685826== Content-Type: text/plain; charset="utf8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 TmV3IGlzc3VlIGJ5IGNydHhjciBvbiB2b2lkLXBhY2thZ2VzIHJlcG9zaXRvcnkKCmh0dHBzOi8v Z2l0aHViLmNvbS92b2lkLWxpbnV4L3ZvaWQtcGFja2FnZXMvaXNzdWVzLzQwOTc3CgpEZXNjcmlw dGlvbjoKVGhlcmUgaXMgYW4gaXNzdWUgaW4gdGhlIHdheSB0aGUgdnNjb2RlIHRlbXBsYXRlIG1h bmFnZXMgZGVwZW5kZW5jaWVzLg0KDQpUaGUgdm9pZGxpbnV4IHZzY29kZSB0ZW1wbGF0ZSBjb250 YWlucyB0aGUgZm9sbG93aW5nIHBhdGNoOiBodHRwczovL2dpdGh1Yi5jb20vdm9pZC1saW51eC92 b2lkLXBhY2thZ2VzL2Jsb2IvbWFzdGVyL3NyY3BrZ3MvdnNjb2RlL3BhdGNoZXMvcmlwZ3JlcC5w YXRjaCANCg0KSXQgbWFrZXMgdGhlIHBhY2thZ2VzLmpzb24gcG9pbnQgdG8gYSBjdXN0b20gcmlw Z3JlcCBub2RlanMgbW9kdWxlOiBodHRwczovL2dpdGh1Yi5jb20vYXRrL3ZvaWQtdnNjb2RlLXJp cGdyZXAuZ2l0DQoNCkFzIHdlIGNhbiBzZWUsIHRoaXMgaXMgYSB2b2lkbGludXggc3BlY2lmaWMg bW9kaWZpY2F0aW9uLCBwcmltYXJpbHkgaW50cm9kdWNlZCBpbiBkNWU3ZmRiNDUxMGJjMjM1M2Jj Y2NkZTJjYTEzNGI2NWM0YjU5OWNmIHRvIG1ha2UgaXQgYnVpbGQgd2l0aCBwcGM2NGxlIGV2ZW4g dGhvdWdoIE1TIGRvZXMgbm90IHNoaXAgc3VjaCBiaW5hcmllcyBhbmQgZG9lcyBub3Qgc3VwcG9y dCBpdDogaHR0cHM6Ly9naXRodWIuY29tL21pY3Jvc29mdC92c2NvZGUvaXNzdWVzLzgwMDQyDQoN CioqUHJvYmxlbSoqDQpTaG91bGQgYW4gYXR0YWNrZXIgZ2FpbiBhY2Nlc3MgdG8gQGF0ayAncyBh Y2NvdW50IHRoZW4gaGUgY2FuIHB1dCBzb21ldGhpbmcgbWFsaWNpb3VzIGludG8gdGhhdCByZXBv LiBUaHVzLCBpdCAgY2FuIGJlIHVzZWQgdG8gbGF1bmNoIHN1cHBseSBjaGFpbiBhdHRhY2tzIGFn YWluc3Qgdm9pZGxpbnV4IHVzZXJzIHdoZW4gdnNjb2RlIGlzIGJ1aWxkLiANCg0KVGhlIG1haW4g cHJvYmxlbSBpcyB0aGF0IHRoZXJlIGlzIGlzIG5vIHNwZWNpZmljIGdpdCBjb21taXQgaWQgcGlu bmVkIG9yIGFueXRoaW5nLCBpdCBqdXN0IGJsaW5kbHkgdGFrZXMgdGhlIGNvbnRlbnQgb2YgdGhl IHJlcG8uDQoNClRoaXMgc2hvdWxkIGJlIGFkZHJlc3NlZCBieSBmb3IgZXhhbXBsZSBlaXRoZXI6 DQoNCigxKSBHZXR0aW5nIHJpZCBvZiB0aGF0IHJpcGdyZXAgcGF0Y2guIEFzIGl0cyByZWFzb24g Zm9yIGV4aXN0aW5nIGlzIHRvIG1ha2UgaXQgYnVpbGQgb24gcGxhdGZvcm1zIG5vdCBzdXBwb3J0 ZWQgYnkgdXBzdHJlYW0sIHRoZSBvcHRpb24gb2YgZ2V0dGluZyByaWQgb2YgaXQgaGFzIHRvIGJl IG1lbnRpb25lZCBJIHRoaW5rLiBIb3dldmVyLCB0aGlzIGltcGxpZXMgc29tZSB1c2VycyB3b3Vs ZCBiZSBhZmZlY3RlZC4NCg0KKDIpIEJ5IGFkZGluZyBhcHByb3ByaWF0ZSB5YW1sLmxvY2sgZW50 cmllcyB3aGljaCB3b3VsZCBwb2ludCB0byBrbm93biBnb29kIGdpdCBjb21taXQgaWRzLg0KDQpG dXJ0aGVybW9yZSwgdGhpcyBvbmx5IHdvcmtzIGJlY2F1c2UgZm9yIHRoYXQgcGF0Y2ggdG8gd29y aywgdGhlIHlhcm4gb3B0aW9uICItLWZyb3plbi1sb2NrZmlsZSIgd2FzIHJlbW92ZWQgaW4gZDVl N2ZkYjQ1MTBiYzIzNTNiY2NjZGUyY2ExMzRiNjVjNGI1OTljZiAgSSB0aGluayBpdCdzIGJldHRl ciB0byBlbmFibGUgaXQuLi4NCg0KSSByZWFsaXplIG5vZGUuanMgaGFzIG5vdCB0aGUgYmVzdCBy ZXB1dGF0aW9uIHdoZW4gaXQgY29tZXMgdG8gc2VjdXJpdHkgYW55d2F5IGJ1dCB3ZSBzaG91bGQg bm90IG1ha2UgaXQgd29yc2UuDQoNCklmIGEgZGVjaXNpb24gaXMgbWFkZSB0byBrZWVwIHRoaXMg cGF0Y2ggSSBob3BlIHdlIGNhbiBhdCBsZWFzdCBidWlsZCBpdCB3aXRoIHBpbm5lZCBkZXBlbmRl bmNpZXMuDQpJIGhhdmUgYXR0YWNoZWQgYSBwYXRjaCB0aGF0IHdvdWxkIHBpbiB0aGUgY29tbWl0 aWQgaW4geWFybi5sb2NrIGFuZCB3aXRoIHRoYXQsIEkgY2FuIGJ1aWxkIDEuNzMuMSB3aXRoIC0t ZnJvemVuLWxvY2tmaWxlIGVuYWJsZWQgYWdhaW4uIElmIHRoZSBjb21taXQgaWQgZG9lcyBub3Qg bWF0Y2ggdGhlIGJ1aWxkIGlzIGFib3J0ZWQuIA0KDQpbcmlwZ3JlcC15YXJuLnBhdGNoLnR4dF0o aHR0cHM6Ly9naXRodWIuY29tL3ZvaWQtbGludXgvdm9pZC1wYWNrYWdlcy9maWxlcy8xMDE4NDM3 OC9yaXBncmVwLXlhcm4ucGF0Y2gudHh0KQ0KDQpPZiBjb3Vyc2UsIGtlZXBpbmcgdGhhdCB5YXJu IHBhdGNoIGFwcGx5aW5nIGJldHdlZW4gdmVyc2lvbiB1cGRhdGVzIGNvdWxkIGJlIGEgYml0IGFu bm95aW5nIGJ1dCBJIHRoaW5rIHRoYXQncyBub3QgYSByZWFzb24gdG8gbm90IGRvIGl0LiANCg0K IEBhdGsgQHNoaXpvbmljIA0KDQoNCg0KCg== --===============1935427606765685826==--