Their extension uses the actual code from the legitimate Dracula theme but also includes an added script that collects system information, including the hostname, number of installed extensions ...

Microsoft has removed two popular VSCode extensions, 'Material Theme - Free' and 'Material Theme Icons - Free,' from the Visual Studio Marketplace for allegedly containing malicious code.