VSCan: What Scanning Malicious VSCode Extensions Reveals About Agent Tool Privilege Boundaries

VSCode extensions inherit full system access. So do agent tools. VSCan's detection heuristics expose the privilege boundary problem both ecosystems face.