Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> You don’t even have to run a git command, just opening this directory in VSCode is enough to get infected.

LOL, is that shit being worked on by former Outlook developers, bringing with them their zero click bags of tricks?



vscode explicitly warns you when you open a directory and gives you the choice to open it in restricted mode without all the integrations. it's not zero click at all.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: