[rwth-security] Malicious Microsoft VSCode extensions target devs, crypto community