Protect Your Secrets: Understanding and Measuring Data Exposure in VSCode Extensions