Hacker News Reader

> You don’t even have to run a git command, just opening this directory in VSCode is enough to get infected.

LOL, is that shit being worked on by former Outlook developers, bringing with them their zero click bags of tricks?

vscode explicitly warns you when you open a directory and gives you the choice to open it in restricted mode without all the integrations. it's not zero click at all.

Reply on news.ycombinator.com