No Click, No Run — Automatic Malware Execution Hidden in a VSCode Project

A detailed breakdown of a sophisticated malware attack disguised as a technical assignment sent via LinkedIn. The attack exploits VSCode's tasks.json to automatically execute remote code when a project folder is opened, without requiring any user interaction beyond trusting the workspace. The analysis walks through multiple Show more