Running node 20.12.2 + vsce 2.26.0 on windows, and publishing it gives error "spawn EINWAL"

I guess it executes npm.cmd

see nodejs/node#52554 and https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2

workaround is to add { shell: true }

https://github.com/microsoft/vscode-vsce/blob/main/src/package.ts#L409

workaround: downgrading to node 20.12.1