VS Code Auto-Run Task Execution
Detects the creation or modification of a `.vscode/tasks.json` file that is configured to automatically run a task when a folder is opened. Adversaries can abuse this feature in VS Code and GitHub Codespaces to achieve remote code execution by tricking a user into opening a malicious repository or pull request.
Sigma
