ReversingLabs has uncovered a series of VS Code extensions that designed to siphon off sensitive information from unsuspecting users.