Malicious extensions can be engineered to bypass verification checks for popular integrated development environments, according to research from OX Security.
Source: htdarkreading.com