Microsoft patched a high-severity flaw in Visual Studio Code after researchers found attackers could hide malicious settings ...