Security VSCode IDE forks expose users to “recommended extension” attacks by CybrGPT January 6, 2026 by CybrGPT January 6, 2026