3 comments

[ 2.4 ms ] story [ 17.5 ms ] thread
Are you sure it's actually VSCode and not something you ran in the integrated terminal or an extension? All of those are hosted by VSCode as far as macOS is concerned and would display the confirmation dialog.
Even if it is the actual VSCode it's probably incompetence not malice.

They pulled in 1300 more npm packages and 83 of them needed the microphone permission for something unrelated, optional and unused.

This would be my assumption as well. The title currently says “VS Code caught”, indicating a feature was uncovered that they wished to keep secret, but this is just an imgur link without any context.