Fake Open VSX Extensions Harvest Private Repo and CI Data

New GlassWorm attack targets macOS via compromised OpenVSX extensions