New DPRK Malware Uses Microsoft VSCode Dictionary Files(opensourcemalware.com)
opensourcemalware.com
New DPRK Malware Uses Microsoft VSCode Dictionary Files
https://opensourcemalware.com/blog/contagious-interview-malicious-dictionary
2 comments
This one is more explict about the dangers of tasks.json. Unexpected behaviour by developers with leads to more exploits of them.
Threat actors expand abuse of Microsoft Visual Studio Code
https://news.ycombinator.com/item?id=46713526