New Attacks Exploit VSCode Extensions and npm Packages –