VS Code Spawns Node/Script Interpreter via tasks.json Auto-Run

Ibrahim Saud@tektrix

•updated Sep 22, 2026•0•0•3

Detects instances where Microsoft Visual Studio Code (Code.exe) spawns common interpreters or command-line tools (such as node, python, cmd, or powershell) that are not associated with known internal VS Code process behaviors like renderer tasks or tunnel operations. This activity may indicate malicious use of the integrated terminal or extension execution contexts to execute unauthorized code.