A quiet compromise of a popular open-source coding editor has turned into one of the most unsettling software supply-chain ...