GitHub traced the breach to a malicious version of a Visual Studio Code extension, underscoring the threat of hackers ...