Malicious VSCode extensions with millions of installs discovered - eviltoast