News for hackers. Stuff that matters.

A comment on Fake VS Code Extension on NPM Spreads Multi-Stage Malware. Parent comment

Re:Fake VS Code Extension on NPM Spreads Multi-Stage Malware by jbverschoor on Monday February 10, 2025 @03:54PM (#43005034)
Run a container/vm for your project. Use VSCode only as an interface. Dev containers should do this, but I don't like the performance. I use my own docker-powered chroot container thingy https://github.com/jrz/container-shell
[ Parent | on HN ]
Re:Fake VS Code Extension on NPM Spreads Multi-Stage Malware by ATechGuy on Monday February 10, 2025 @06:07PM (#43006459)
> Dev containers should do this, but I don't like the performance What kind of dev container have you tried? What is the source of perf overhead?
[ Parent | on HN ]
Re:Fake VS Code Extension on NPM Spreads Multi-Stage Malware by mdaniel on Monday February 10, 2025 @09:16PM (#43008214)
If you mean "connect to VS code inside that container remotely," then https://news.ycombinator.com/item?id=42979467 is worth your read
[ Parent | on HN ]