Extension is flagged as malware due to preinstall script downloading files #378

Confirm that this is a Bug for the editor extension, not the CLI

• This bug does not happen in the Oxlint/Oxfmt CLI
• After restarting the editor, the bug still appears

Versions used

VS Code extension: v1.60.0

What happened?

This extension is flagged as a tampering risk due to downloading its icon as a preinstall script. (See package.json)

Example reports can be found at https://secure.software/vscode/packages/oxc/oxc-vscode which flags it as "detected presence of files with behaviors exclusively used by malicious software"

As you can imagine, this kind of categorization makes adoption difficult at many organizations. Since it's a relatively minor change to package the icon with the release, I'd like to ask that this behavior be removed from the preinstall scripts.