Use formulas instead of Power Query for tidy files, with a visible source path and clear parameters that teammates can review ...
A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.