avatar

Swachchhanda Shrawan Poudel

@_swachchhanda_
Completionist
0 followers11 downloads0 copies0 likes45 views

1 detection

Detects instances where Visual Studio Code spawns a shell process to download a remote script via tools like 'curl' or 'wget' and pipe it directly into the Node.js runtime. This technique has been observed in the "Contagious Interview" campaign, where threat actors abuse VS Code's 'tasks.json' to execute malicious payloads in memory.
avatar
Swachchhanda Shrawan Poudel@_swachchhanda_
avatar
Detections.ai Community
9 months ago
0045