Malicious VS Code folderOpen Task Auto-Execution (Contagious Interview)

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•1

Detects instances where development IDEs (VS Code or Cursor) spawn suspicious child processes such as command shells (cmd, powershell, bash) or network utilities (curl, wget). The detection logic focuses on common command line patterns associated with IDE tasks or potential malicious activity.