I have been targeted with this attack in the wild where '.vscode/tasks.json' had the auto-run code. I smelled something fishy and never ran it though. https:/

I have been targeted with this attack in the wild where '.vscode/tasks.json' had the auto-run code. I smelled something fishy and never ran it though. https://news.ycombinator.com/item?id=48127469 https://news.ycombinator.com/item?id=48127469