"vscode-exe-calc" is a simple vscode extension to execute calc.exe. It demonstrated the possibility to execute reverse shell C2 tunnel or other RCE via vscode extension. An attacker may launch such kinds of "Supply-Chain Attacks" via Social Engineering or published to VSCODE Market Place.
Source Code available: https://github.com/CyberSecThreat-Cor...