Newly Discovered Bugs in VSCode extensions could lead to a supply chain attack