open vsx npm quickfox supply chain

Open VSX, npm e QuickFox allargano la crisi della supply chain