VSCode extensions with 9M installs pulled over security risksbleepingcomputer.com8 pointsakyuua year ago