Microsoft Visual Studio Code flaw lets extensions steal passwords | Hacker News Reader