VSCode Extension Marketplaces: Uncovering a Critical Supply Chain Risk Most developers trust their code editor extensions, but recent research reveals a hidden danger. Sensitive secrets embedded in VSCode and Open VSX marketplaces put over 150,000 users at risk. These vu... AI security extension security malware risk Microsoft secrets management supply chain VSCode