Trojanized OpenVSX Extension Spreads GlassWorm Across VS Code, Cursor, and Windsurf