Your VS Code Extensions Are a Supply Chain Attack Surface April 13, 2026 · Dev.to Read full story at source