Bloom Security’s Extension Resurrection research exposes a blind spot in developer security — Blankdot