Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.
A feature that allows developers to make applications accessible by a public GitHub URL could enable attackers to deliver malware and avoid detection. Attackers could start abusing GitHub Codespaces, ...