How a Malicious VSIX Uses the Signed Editor Runtime
This is the repository-based branch: a project task leads to the extension installer, which supplies the collection pipeline. Part 1’s clipboard lure is a separate entry point. Related Windows elevation code appears in both branches. The July repository review identified…