New GlassWorm attack targets macOS via compromised OpenVSX extensions