Is this known to be exploitable in any Electron apps, and specifically VSCode extensions?