Windows Server issue was fixed roughly a month ago, so make sure you update now.
Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...