Ransomware in VSCode extensions triggers PowerShell payload to encrypt test files; developers warned to strengthen security.