The VSCode.dev browser client, which uses the CLI and permissions to create a tunnel. I’m using a Debian compute instance on Google Cloud Platform (GCP) but any type and provider will work.

Malicious cases on the VSCode Marketplace Visual Studio Code (VSC) is a source-code editor published by Microsoft and used by a significant percentage of professional software developers worldwide.

Chinese hackers targeting large IT service providers in Southern Europe were seen abusing Visual Studio Code (VSCode) tunnels to maintain persistent access to compromised systems.