Fake VS Code extension on NPM uses altered ScreenConnect utility as spyware | Hacker News Reader