I don't quite understand why so many people still don't use containers. You can easily use devcontainers in VS Code. That way, each repository has its own container, and the risk of infecting your system with malware is much lower.
While true, I tried it devcontainers recently for the first time and it was molasses slow for every keystroke in the terminal and action with files. Ended up putting dropbear in the container temporarily and sshing into it using the standard remote connection. That got it back to normal. I should see about filing a GitHub issue ticket
I prefer to do the vetting before running other people's code. If someone asks me to do a interview project that has a virus on it, I will just waste my time even if I don't get hacked.