Does this fix the extension issue?

No. It seems only official builds work; arch gets around this by switching from the official MS extension store to open-vsx. I guess I should do that, too, if there is nobody against it.

No. It seems only official builds work; arch gets around this by switching from the official MS extension store to open-vsx. I guess I should do that, too, if there is nobody against it.

i switch to openvsx. it still not work

You also need to install the vsx sign extension. One issue with that is that since it is proprietary, there are only binary blobs.

One of the OpenVSX maintainers did make node-ovsx-sign: https://github.com/filiptronicek/node-ovsx-sign
This is used by Arch Linux: https://gitlab.archlinux.org/archlinux/packaging/packages/code/-/blob/1ba2b3052cf68e09cbf76f7374fc7488e2c55c08/PKGBUILD#L27

It should also be possible to patch out signature checks, which is done by vscodium: https://github.com/VSCodium/vscodium/blob/57832e468819e0e6b81f4eff499e8a2d762dda7d/patches/disable-signature-verification.patch#L7