Malicious VSCode extensions discovered with millions of installs | Hacker News Reader