VSCode vulnerability