[_AzMoo]

This attack is exactly why IDE's have a concept of trusted and untrusted locations.

[paxys]

That is a very recent addition. The exact behavior they are describing was in VS Code for almost a decade.

[_AzMoo]

Trusted locations were added to VSCode in 2021.

https://code.visualstudio.com/updates/v1_57

[paxys]

And VS Code was released in 2015.

[ikiris]

And this is 2026

[cute_boi]

I think many people gets tired so much they will simply trust all the locations.