https://www.reversinglabs.com/blog/malicious-pull-request-infects-vscode-extension