Visual Studio Code is a developer editor whose repository tasks and extensions can execute code in a developer workstation context. DPRK-linked developer-targeting campaigns distributed trojanized interview repositories that abused folder-open tasks or malicious extensions to steal credentials, environment secrets, cryptocurrency wallets, and source-access material while installing remote-access malware.