Malicious script injected into Amazon Q Developer for VS Code