Malicious VSCode Marketplace extensions hid trojan in fake PNG filebleepingcomputer.com19 pointsspeckx6 months ago