VSCode in WSL "uses a local WebSocket WebSocket connection to communicate with the Remote WSL extension. JavaScript in websites can connect to this server and execute arbitrary commands on the target system"
https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit/
@lupyuen I keep seeing this kind of stuff, and I keep wanting to scream and tell people to use Qubes OS.