VS Code extensions contain trojan-laden fake image https://www.securitricks.com/attackreports/vs-code-extensions-contain-trojan-laden-fake-image