A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual ...