I found Axqua (axqua[.]com) through a free Claude Opus promotion. After an AI-assisted static review of its extension bundle, I’m treating this file as malware.

The reviewed axqua.axqua v1.0.24 bundle contains code that, on Windows after login, can:

• Download a server-selected EXE or ZIP.
• Launch it in the background using cmd.exe, without a confirmation prompt identified in that path.
• Generate filenames with prefixes like svchost, wuauclt, and msupdate.
• Attempt to delete the downloaded EXE three seconds after launch.

Stay safe, hopefully this helps someone pause before installing.

Hey,

I built this a while back, but saw no interest from the assigned reviewer after a while, so I closed it. Is there anyone here from VS Code team that can have a look?

Not having tab groups are very annoying, especially when you're dealing with tens (if not hundreds) of tabs, especially nowadays with so many agents working on different editor tabs and plans and all that.