Hidden "Glassworm" malware spreads through infected VS Code extensions