Newly Discovered Bugs in VSCode Extensions Could Lead to Supply Chain Attacks