Malicious code in vscode-extend (npm)

The package vscode-extend was found to contain malicious code...