Small Open-Source Maintainers Targeted by VS Code Tasks Malware

OpenSourceMalware reports an active campaign that has compromised 21 small open-source repositories by adding malicious .vscode/tasks.json files that auto-execute curl/wget commands on folder open to fetch platform-specific scripts; payloads observed so far are innocuous but can be swapped for credential-stealing or supply-chain malware. The post includes IOCs (vscode-extension-260120.vercel.app URLs), mitigation guidance (disable automatic tasks, review .vscode folders, use hooks), and notes similarities to DPRK/Lazarus TTPs.