The tool's HTML preview mechanism had a flaw allowing malicious JavaScript to access local files and exfiltrate cloud ...
You don’t need it anymore because VS Code added native bracket pair colorization in version 1.60 and turned it on by default ...